Lucene search
+L

2 matches found

OSV
OSV
added 2021/06/21 5:9 p.m.21 views

GHSA-35G4-QX3C-VJHX Automatic room upgrade handling can be used maliciously to bridge a room non-consentually

Impact If a bridge has room upgrade handling turned on in the configuration the roomUpgradeOpts key when instantiating a new Bridge instance., any m.room.tombstone event it encounters will be used to unbridge the current room and bridge into the target room. However, the target room m.room.create...

6.5CVSS5.5AI score0.00936EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2021/06/16 6:45 p.m.21 views

CVE-2021-32659 Automatic room upgrade handling can be used maliciously to bridge a room non-consentually

Matrix-appservice-bridge is the bridging service for the Matrix communication program's application services. In versions 2.6.0 and earlier, if a bridge has room upgrade handling turned on in the configuration the roomUpgradeOpts key when instantiating a new Bridge instance., any m.room.tombstone...

6.5CVSS6.6AI score0.00936EPSS
SaveExploits0References3
Rows per page
Query Builder