CVE-2024-42369CWE-674

A room with itself as a its predecessor will freeze matrix-js-sdk

Medium · published August 20, 2024

CVSS v3.1
4.1
EPSS
0%
Percentile
40.7
In the wild
Unconfirmed
What it is

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. A malicious homeserver can craft a room or room structure such that the predecessors form a cycle. The matrix-js-sdk's getRoomUpgradeHistory function will infinitely recurse in this case, causing the code to hang. This method is public but also called by the 'leaveRoomChain()' method, so leaving a room will also trigger the bug. This was patched in matrix-js-sdk 34.3.1.

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00483 · 40.7th percentile
Weakness
CWE-674 · Uncontrolled Recursion
Published
2024-08-20T14:37Z
EPSS history
Timeline
  • 20 AUG 14:37Z
    A room with itself as a its predecessor will freeze matrix-js-sdk
    cvelistv5