CVE-2024-50336CWE-22

matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal

Medium · published November 12, 2024

CVSS v4.0
5.3
EPSS
1%
Percentile
57.1
In the wild
Unconfirmed
What it is

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. matrix-js-sdk before 34.11.0 is vulnerable to client-side path traversal via crafted MXC URIs. A malicious room member can trigger clients based on the matrix-js-sdk to issue arbitrary authenticated GET requests to the client's homeserver. Fixed in matrix-js-sdk 34.11.1.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
EPSS
0.00829 · 57.1th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2024-11-12T16:38Z
EPSS history
Timeline
  • 12 NOV 16:38Z
    matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal
    cvelistv5