PT-2021-14417 · Unknown · Matrix-React-Sdk

Keerok · Published 2021-03-02 · Updated 2021-03-08 · CVE-2021-21320

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions matrix-react-sdk versions prior to 3.15.0

Description The user content sandbox in matrix-react-sdk can be abused to trick users into opening unexpected documents. This is achieved through several user interactions, allowing the content to be opened with a blob origin. However, it is noted that the content opened in this manner cannot access Matrix user data, so messages and secrets are not at risk.

Recommendations For versions prior to 3.15.0, update to version 3.15.0 to resolve the issue. As a temporary workaround, consider restricting user interactions that could lead to the abuse of the user content sandbox until the update is applied.

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2021-21320

GHSA-52MQ-6JCV-J79X

Affected Products

Matrix-React-Sdk

References · 8

• https://github.com/matrix-org/matrix-react-sdk/pull/5657 · Patch
• https://github.com/matrix-org/matrix-react-sdk/commit/b386f0c73b95ecbb6ea7f8f79c6ff5171a8dedd1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-21320 · Security Note
• https://osv.dev/vulnerability/GHSA-52mq-6jcv-j79x · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-21320 · Vendor Advisory
• https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-52mq-6jcv-j79x · Note
• https://t.me/cvenotify/11000 · Telegram Post
• https://npmjs.com/package/matrix-react-sdk · Note