CVE-2024-52602mediumCWE-918

CVE-2024-52602: medium-severity vulnerability in t2bot matrix-media-repo

Server-Side Request Forgery (SSRF) on redirects and federation in Matrix Media Repo

Published · Updated

Follow this CVE+ Monitor matrix-media-repo+ Monitor github.com/t2bot/matrix-media-repo

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5epss 0.6%
Matrix Media Repo (MMR) is a highly configurable multi-homeserver media repository for Matrix. Matrix Media Repo (MMR) is vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions. This is fixed in MMR v1.3.8. Users are advised to upgrade. Restricting which hosts MMR is allowed to contact via (local) firewall rules or a transparent proxy and may provide a workaround for users unable to upgrade.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Affected products
t2bot · matrix-media-repo
Related CVEs — t2bot matrix-media-repo

In the same product, most dangerous first.

CVE-2024-52791MEDIUMDenial of service through memory exhaustion in Matrix Media RepoEPSS 0.8%CVE-2024-36403MEDIUMDenial of service/high operating costs through unauthenticated downloads in Matrix Media RepoEPSS 0.7%CVE-2024-56515MEDIUMUntrusted file formats can be thumbnailed, invoking potentially further untrusted decoders in Matrix Media RepoEPSS 0.7%CVE-2024-36402MEDIUMUnauthenticated writes to the media repository allow planting of problematic content in Matrix Media RepoEPSS 0.6%