Lucene search

CVE-2022-39250

🗓️ 29 Sep 2022 13:09:15Reported by GoogleType

osv🔗 osv.dev👁 12 Views

Matrix JavaScript SDK prior to version 19.7.0 allows injection of malicious user identity, fixed in version 19.7.

Reporter	Title	Published	Views	Family All 78
Veracode	Authentication Bypass	30 Sep 202206:19	–	veracode
AlpineLinux	CVE-2022-39250	29 Sep 202213:15	–	alpinelinux
RedhatCVE	CVE-2022-39250	17 Oct 202214:18	–	redhatcve
Github Security Blog	matrix-js-sdk subject to user impersonation due to key/device identifier confusion in SAS verification	30 Sep 202222:46	–	github
Prion	Cross site scripting	29 Sep 202213:15	–	prion
OSV	matrix-js-sdk subject to user impersonation due to key/device identifier confusion in SAS verification	30 Sep 202222:46	–	osv
OSV	element-desktop-1.11.8-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	MozillaThunderbird-102.3.1-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	element-web-1.11.8-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	Important: thunderbird security update	25 Oct 202200:00	–	osv

Source	Link
github	www.github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-5w8r-8pgj-5jmf
matrix	www.matrix.org/blog/2022/09/28/upgrade-now-to-address-encryption-vulns-in-matrix-sdks-and-clients
security	www.security.gentoo.org/glsa/202210-35
github	www.github.com/matrix-org/matrix-js-sdk/commit/a587d7c36026fe1fcf93dfff63588abee359be76
github	www.github.com/matrix-org/matrix-js-sdk/releases/tag/v19.7.0

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Sep 2022 13:15Current

7.5High risk

Vulners AI Score7.5

CVSS37.5

EPSS0.001