Matrix-org vulnerabilities
85 CVEs and advisories name Matrix-org as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-43656Sandbox escape for instances that have enabled transformation functions in matrix-hookshot
- CVE-2023-41335Temporary storage of plaintext passwords during password changes in matrix synapse
- CVE-2023-42453Improper validation of receipts allows forged read receipts in matrix synapse
- CVE-2023-38700matrix-appservice-irc events can be crafted to leak parts of targeted messages from other bridged rooms
- CVE-2023-38691matrix-appservice-bridge doesn't verify the sub parameter of an openId token exhange, allowing unauthorized access to provisioning APIs
- CVE-2023-38690matrix-appservice-irc IRC command injection via admin commands containing newlines
- CVE-2023-38686Sydent does not verify email server certificates
- CVE-2023-37259Cross site scripting in Export Chat feature
- CVE-2023-32683URL deny list bypass via oEmbed and image URLs when generating previews in Synapse
- CVE-2023-32682Improper checks for deactivated users during login in synapse
- CVE-2022-39374Synapse Denial of service due to incorrect application of event authorization rules during state resolution
- CVE-2022-39335Synapse does not apply enough checks to servers requesting auth events of events in a room
- CVE-2023-32323Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites
- CVE-2023-30609matrix-react-sdk vulnerable to HTML injection in search results via plaintext message highlighting
- CVE-2023-29529matrix-js-sdk vulnerable to invisible eavesdropping in group calls
- CVE-2022-36060Prototype pollution in matrix-react-sdk
- CVE-2023-28103Prototype pollution in matrix-react-sdk
- CVE-2023-28427Prototype pollution in matrix-js-sdk
- CVE-2022-36059Prototype pollution in matrix-js-sdk
- CVE-2022-41952Uncontrolled Resource Consumption in Matrix Synapse
- CVE-2022-39252When matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder
- CVE-2022-39250Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification
- CVE-2022-39257Matrix iOS SDK vulnerable to impersonation via forwarded Megolm sessions
- CVE-2022-39255Matrix iOS SDK vulnerable ton Olm/Megolm protocol confusion
- CVE-2022-39248matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion
- CVE-2022-39246matrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessions
- CVE-2022-39251Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion
- CVE-2022-39249Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions
- CVE-2022-39236Matrix Javascript SDK improper beacon events can cause availability issues
- CVE-2022-39203Parsing issue in matrix-org/node-irc leading to room takeovers