CVE-2024-32945: Mattermost Mobile

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Mattermost Mobile Apps versions <=2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions.

Affected products

• Mattermost Mattermost Mobile: before 2.17.0 (fixed in 2.17.0)

Published 2024-07-15. Last modified 2026-06-17.