PT-2023-22806 · Unknown · Matrix-React-Sdk

Andybala + 1 · Publicado 2023-04-25 · Atualizado 2024-06-15 · CVE-2023-30609

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions matrix-react-sdk versions prior to 3.71.0

Description The issue concerns plain text messages containing HTML tags being rendered as HTML in search results. An attacker would need to trick a user into searching for a specific message with an HTML injection payload to exploit this. Although cross-site scripting is not possible due to the hardcoded content security policy, there are exceptions where resources from specific domains can be included, potentially leading to XSS vectors.

Recommendations For versions prior to 3.71.0, update to version 3.71.0 to resolve the issue. As a temporary workaround, restarting the client will clear the HTML injection.

Exploit

Correção

XSS

Special Elements Injection

Enumeração de Fraquezas

CWE-79

CWE-74

Identificadores relacionados

CVE-2023-30609

GHSA-XV83-X443-7RMW

OPENSUSE-SU-2024:12884-1

OPENSUSE-SU-2024:12895-1

Produtos afetados

Matrix-React-Sdk

Referências · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30609.json · Exploit
• https://github.com/matrix-org/matrix-react-sdk/commit/bf182bc94556849d7acdfa0e5fdea2aa129ea826 · Correção
• https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-xv83-x443-7rmw · Aviso do Fabricante
• https://github.com/matrix-org/matrix-react-sdk/releases/tag/v3.71.0 · Nota
• https://github.com/matrix-org/matrix-react-sdk · Nota
• https://osv.dev/vulnerability/CVE-2023-30609 · Aviso do Fabricante
• https://t.me/cvenotify/49972 · Publicação no Telegram
• https://t.me/cibsecurity/62855 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-30609 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-xv83-x443-7rmw · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:12895-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2023-30609 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:12884-1 · Aviso do Fabricante