Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-5522 EUVD-2023-57835GHSA-2w9p-mj8f-374x

Mobile app freezes when receiving a post with hundreds of emojis

Published Oct 17, 2023 · Updated Sep 5, 2024 · Assigned by Mattermost

Description

Mattermost Mobile fails to limit the maximum number of Markdown elements in a post allowing an attacker to send a post with hundreds of emojis to a channel and freeze the mobile app of users when viewing that particular channel. 

Affected products

VendorProductAffectedFixed
Mattermost Mattermost < 2.8.0 2.8.0

References