CVE-2022-39257

🗓️ 28 Sep 2022 20:55:10Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 62 Views

Matrix iOS SDK CVE-2022-39257 allows construction of spoofed messages from another perso

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2022-39257	29 Sep 202200:34	–	circl
CNNVD	Matrix 授权问题漏洞	28 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-39257 Matrix iOS SDK vulnerable to impersonation via forwarded Megolm sessions	28 Sep 202220:55	–	cvelist
EUVD	EUVD-2022-41769	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Matrix SDKs	29 Sep 202200:00	–	ncsc
NVD	CVE-2022-39257	28 Sep 202221:15	–	nvd
OSV	CVE-2022-39257 Matrix iOS SDK vulnerable to impersonation via forwarded Megolm sessions	28 Sep 202220:55	–	osv
Prion	Design/Logic Flaw	28 Sep 202221:15	–	prion
Positive Technologies	PT-2022-24849 · Unknown · Matrix Ios Sdk	28 Sep 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-39257	5 Feb 202519:32	–	redhatcve

NVD

Vulners

Node

matrix software_development_kitRange<0.23.19iphone_os

[
  {
    "product": "matrix-ios-sdk",
    "vendor": "matrix-org",
    "versions": [
      {
        "status": "affected",
        "version": "< 0.23.19"
      }
    ]
  }
]

Source	Link
github	www.github.com/matrix-org/matrix-ios-sdk/security/advisories/GHSA-qxr3-5jmq-xcf4
github	www.github.com/matrix-org/matrix-ios-sdk/releases/tag/v0.23.19
github	www.github.com/matrix-org/matrix-ios-sdk/commit/5ca86c328a5faaab429c240551cb9ca8f0f6262c
matrix	www.matrix.org/blog/2022/09/28/upgrade-now-to-address-encryption-vulns-in-matrix-sdks-and-clients