3.1
Low
CVE-2024-3872 Mattermost Mobile app versions 2.13.0 and earlier use a regular expression with polynomial complexity to parse certain…
Description
Mattermost Mobile app versions 2.13.0 and earlier use a regular expression with polynomial complexity to parse certain deeplinks, which allows an unauthenticated remote attacker to freeze or crash the app via a long maliciously crafted link.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Mattermost 2.14 | earliest → < 2.14.0 | 2.14.0 |
| Mattermost 2.13 | earliest → 2.13.0 | No fix stated |
| mattermost_mobile 2.13 | earliest → 2.13.0 | No fix stated |