Cross-site Scripting (XSS)

Matrix Android SDK 2 is vulnerable to cross-site scripting.The vulnerability exists in multiple functions in MXMegolmDecryption.kt due to a protocol confusion in order to send fake to-device messages which allows an attacker to inject the key backup secret during a self-verification...

PT-2022-24844

Name of the Vulnerable Software and Affected Versions Matrix Javascript SDK versions prior to 19.7.0 Description The issue allows an attacker cooperating with a malicious homeserver to construct messages that appear to come from another person without indication. A sophisticated attacker could...