Information Disclosure

matrix-appservice-irc is vulnerable to Information Disclosure. Using an event ID as a target, an attacker is able to leak a portion of a specified messaging event from another bridged room, resulting in disclosure of sensitive information...

PT-2023-26565

Name of the Vulnerable Software and Affected Versions matrix-appservice-irc versions prior to 1.0.1 Description The issue allows an attacker to craft an event that leaks part of a targeted message event from another bridged room, requiring knowledge of an event ID to target. Recommendations For...

matrix-appservice-irc Information Disclosure Vulnerability

matrix-appservice-irc is a bridge for Matrix. This bridge passes all IRC messages to Matrix and all Matrix messages to IRC. An information disclosure vulnerability exists in versions prior to matrix-appservice-irc 1.0.1, which stems from a vulnerability that allows an attacker to obtain informati...

CVE-2021-32659

Matrix-appservice-bridge is the bridging service for the Matrix communication program's application services. In versions 2.6.0 and earlier, if a bridge has room upgrade handling turned on in the configuration the roomUpgradeOpts key when instantiating a new Bridge instance., any m.room.tombstone...

PT-2021-19837

Name of the Vulnerable Software and Affected Versions Matrix-appservice-bridge versions 2.6.0 and earlier Description The issue concerns the Matrix communication program's application services, specifically the bridging service. If a bridge has room upgrade handling turned on in the configuration...