PT-2023-22806 · Unknown · Matrix-React-Sdk

Andybala + 1 · Published 2023-04-25 · Updated 2024-06-15 · CVE-2023-30609

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions matrix-react-sdk versions prior to 3.71.0

Description The issue concerns plain text messages containing HTML tags being rendered as HTML in search results. An attacker would need to trick a user into searching for a specific message with an HTML injection payload to exploit this. Although cross-site scripting is not possible due to the hardcoded content security policy, there are exceptions where resources from specific domains can be included, potentially leading to XSS vectors.

Recommendations For versions prior to 3.71.0, update to version 3.71.0 to resolve the issue. As a temporary workaround, restarting the client will clear the HTML injection.

Exploit

Fix

XSS

Special Elements Injection

Weakness Enumeration

CWE-79

CWE-74

Related Identifiers

CVE-2023-30609

GHSA-XV83-X443-7RMW

OPENSUSE-SU-2024:12884-1

OPENSUSE-SU-2024:12895-1

Affected Products

Matrix-React-Sdk

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30609.json · Exploit
• https://github.com/matrix-org/matrix-react-sdk/commit/bf182bc94556849d7acdfa0e5fdea2aa129ea826 · Patch
• https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-xv83-x443-7rmw · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-30609 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-30609 · Security Note
• https://osv.dev/vulnerability/GHSA-xv83-x443-7rmw · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12895-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12884-1 · Vendor Advisory
• https://github.com/matrix-org/matrix-react-sdk/releases/tag/v3.71.0 · Note
• https://github.com/matrix-org/matrix-react-sdk · Note
• https://t.me/cvenotify/49972 · Telegram Post
• https://t.me/cibsecurity/62855 · Telegram Post
• https://suse.com/security/cve/CVE-2023-30609 · Note