CVE-2023-41318

2023-09-0820:15:14

CWE-79

[email protected]

web.nvd.nist.gov

matrix-media-repo

vulnerability

cve-2023-41318

media repository

security advisory

remote code execution

nvd

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.0%

JSON

matrix-media-repo is a highly customizable multi-domain media repository for the Matrix chat ecosystem. In affected versions an attacker could upload a malicious piece of media to the media repo, which would then be served with Content-Disposition: inline upon download. This vulnerability could be leveraged to execute scripts embedded in SVG content. Commits 77ec235 and bf8abdd fix the issue and are included in the 1.3.0 release. Operators should upgrade to v1.3.0 as soon as possible. Operators unable to upgrade should override the Content-Disposition header returned by matrix-media-repo as a workaround.

Affected configurations

Vulners

NVD

Node

turt2livematrix-media-repoRange<1.3.0

VendorProductVersionCPE
turt2livematrix\-media\-repo*cpe:2.3:a:turt2live:matrix\-media\-repo:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
turt2live	matrix\-media\-repo	*	cpe:2.3:a:turt2live:matrix\-media\-repo::::::::

CNA Affected

[
  {
    "vendor": "turt2live",
    "product": "matrix-media-repo",
    "versions": [
      {
        "version": "< 1.3.0",
        "status": "affected"
      }
    ]
  }
]