CVE-2023-41318mediumCWE-79

CVE-2023-41318: falha de média gravidade em turt2live matrix-media-repo

Unsafe media served inline on download endpoints in matrix-media-repo

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar matrix-media-repo+ Monitorar github.com/turt2live/matrix-media-repo

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.1epss 0.5%
matrix-media-repo is a highly customizable multi-domain media repository for the Matrix chat ecosystem. In affected versions an attacker could upload a malicious piece of media to the media repo, which would then be served with `Content-Disposition: inline` upon download. This vulnerability could be leveraged to execute scripts embedded in SVG content. Commits `77ec235` and `bf8abdd` fix the issue and are included in the 1.3.0 release. Operators should upgrade to v1.3.0 as soon as possible. Operators unable to upgrade should override the `Content-Disposition` header returned by matrix-media-repo as a workaround.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
Produtos afetados
turt2live · matrix-media-repo
CVEs relacionadas — turt2live matrix-media-repo

No mesmo produto, das mais perigosas para as menos.

CVE-2021-29453MEDIUMDenial of service through memory exhaustionEPSS 1.1%