CVE-2024-32945

Summary

CVE-2024-32945 is a vulnerability affecting Mattermost Mobile Apps versions prior to 2.16.0. It allows an attacker to manipulate Latex posts by abusing a globally shared MathJax state. By creating a crafted post with specific macro definitions, an adversary can alter the contents of another user's Latex post, potentially leading to misinformation or unintended actions within the Mattermost platform. This issue could be exploited to conduct phishing attacks, spread disinformation, or perform other malicious activities. Organizations using Mattermost are advised to update their mobile apps to the latest version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.