title:  Denial of Service for mobile app users due to automatic code highlighting
description: Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mobile app.
problem types: CWE-400: Uncontrolled Resource Consumption
affected:
{
defaultStatus: unaffected
product: Mattermost Mobile
vendor: Mattermost
versions:
status: unaffected, version: 2.13.0
lessThanOrEqual: 2.12.0, status: affected, version: 0, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 3.5
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Update Mattermost Mobile Apps to versions 2.13.0 or higher.