1 matches found
GHSA-XVQG-MV25-RWVW Parsing issue in matrix-org/node-irc leading to room takeovers
Impact Attackers can specify a specific string of characters, which would confuse the bridge into combining an attacker-owned channel and an existing channel, allowing them to grant themselves permissions in the channel. Patched The vulnerability has been patched in matrix-appservice-irc 0.35.0...
8.8CVSS8.6AI score0.00759EPSS
SaveExploits0References4
20