Lucene search
+L

3 matches found

Vulnrichment
Vulnrichment
•added 2022/09/28 12:00 a.m.•6 views

CVE-2022-39264 nheko vulnerable to secret poisoning using MITM on secret requests by the homeserver

nheko is a desktop client for the Matrix communication application. All versions below 0.10.2 are vulnerable homeservers inserting malicious secrets, which could lead to man-in-the-middle attacks. Users can upgrade to version 0.10.2 to protect against this issue. As a workaround, one may apply th...

8.6CVSS8.4AI score0.00797EPSS
SaveExploits0References5
OSV
OSV
•added 2022/09/28 12:00 a.m.•21 views

CVE-2022-39264 nheko vulnerable to secret poisoning using MITM on secret requests by the homeserver

nheko is a desktop client for the Matrix communication application. All versions below 0.10.2 are vulnerable homeservers inserting malicious secrets, which could lead to man-in-the-middle attacks. Users can upgrade to version 0.10.2 to protect against this issue. As a workaround, one may apply th...

8.6CVSS7AI score
SaveExploits0References7
AlpineLinux
AlpineLinux
•added 2022/09/28 12:00 a.m.•118 views

CVE-2022-39264

nheko is a desktop client for the Matrix communication application. All versions below 0.10.2 are vulnerable homeservers inserting malicious secrets, which could lead to man-in-the-middle attacks. Users can upgrade to version 0.10.2 to protect against this issue. As a workaround, one may apply th...

8.6CVSS6AI score0.00797EPSS
SaveExploits0
Rows per page
Query Builder