Lucene search

CVE-2022-39250

🗓️ 29 Sep 2022 13:09:15Reported by [email protected]Type

Matrix JavaScript SDK prior to 19.7.0 allows attacker to inject their cross-signing user identity for malicious interferenc

Reporter	Title	Published	Views	Family All 78
Veracode	Authentication Bypass	30 Sep 202206:19	–	veracode
RedhatCVE	CVE-2022-39250	17 Oct 202214:18	–	redhatcve
Github Security Blog	matrix-js-sdk subject to user impersonation due to key/device identifier confusion in SAS verification	30 Sep 202222:46	–	github
AlpineLinux	CVE-2022-39250	29 Sep 202213:15	–	alpinelinux
Prion	Cross site scripting	29 Sep 202213:15	–	prion
OSV	matrix-js-sdk subject to user impersonation due to key/device identifier confusion in SAS verification	30 Sep 202222:46	–	osv
OSV	CVE-2022-39250	29 Sep 202213:15	–	osv
OSV	MozillaThunderbird-102.3.1-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	element-desktop-1.11.8-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	element-web-1.11.8-1.1 on GA media	15 Jun 202400:00	–	osv

Nvd

Node

matrix javascript_sdkRange<19.7.0node.js

Source	Link
matrix	www.matrix.org/blog/2022/09/28/upgrade-now-to-address-encryption-vulns-in-matrix-sdks-and-clients
github	www.github.com/matrix-org/matrix-js-sdk/commit/a587d7c36026fe1fcf93dfff63588abee359be76
security	www.security.gentoo.org/glsa/202210-35
github	www.github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-5w8r-8pgj-5jmf
github	www.github.com/matrix-org/matrix-js-sdk/releases/tag/v19.7.0

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Sep 2022 13:15Current

CVSS37.5

EPSS0.001