Lucene search
+L

1 matches found

OSV
OSV
added 2023/09/08 7:51 p.m.24 views

CVE-2023-41318 Unsafe media served inline on download endpoints in matrix-media-repo

matrix-media-repo is a highly customizable multi-domain media repository for the Matrix chat ecosystem. In affected versions an attacker could upload a malicious piece of media to the media repo, which would then be served with Content-Disposition: inline upon download. This vulnerability could b...

4.1CVSS5.6AI score0.00433EPSS
SaveExploits0References6
Rows per page
Query Builder