PT-2024-7453 · Unknown · Matrix-React-Sdk

Dkasak · Published 2024-06-14 · Updated 2024-10-17 · CVE-2024-47824

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: matrix-react-sdk versions 3.18.0 through 3.101.9

Description: The issue is related to insufficient protection of service data, allowing a malicious homeserver to potentially steal message keys for a room when a user invites another user to that room. This is possible because matrix-react-sdk before version 3.102.0 shared historical message keys on invite.

Recommendations: For versions 3.18.0 through 3.101.9, update to version 3.102.0 to prevent the potential theft of message keys by a malicious homeserver during room invites. As a temporary workaround, consider disabling the sharing of message keys on invite until a patch is available. Restrict access to the vulnerable functionality to minimize the risk of exploitation. Avoid using the vulnerable version of matrix-react-sdk until the issue is resolved.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2024-08832

CVE-2024-47824

GHSA-QCVH-P9JQ-WP8V

Affected Products

Matrix-React-Sdk

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47824.json · Exploit
• https://osv.dev/vulnerability/GHSA-qcvh-p9jq-wp8v · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47824 · Security Note
• https://bdu.fstec.ru/vul/2024-08832 · Security Note
• https://osv.dev/vulnerability/CVE-2024-47824 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-47824 · Security Note
• https://github.com/matrix-org/matrix-react-sdk · Note
• https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-qcvh-p9jq-wp8v · Note
• https://github.com/matrix-org/matrix-react-sdk/commit/6fc9d7641c51ca3db8225cf58b9d6e6fdd2d6556 · Note
• https://github.com/matrix-org/matrix-react-sdk/pull/12618 · Note
• https://twitter.com/CveFindCom/status/1846220015634145294 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1846286130913652834 · Twitter Post
• https://twitter.com/matrixdotorg/status/1846158435609391169 · Twitter Post
• https://t.me/cvenotify/98139 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1846726831140938063 · Twitter Post