Lucene search
+L

3 matches found

OSV
OSV
added 2024/10/15 2:53 p.m.17 views

CVE-2024-47080 matrix-js-sdk keys sent via `sendSharedHistoryKeys` vulnerable to interception by malicious homeserver

matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. In matrix-js-sdk versions versions 9.11.0 through 34.7.0, the method MatrixClient.sendSharedHistoryKeys is vulnerable to interception by malicious homeservers. The method was introduced by MSC3061 and is commonly used to...

8.7CVSS6.5AI score
SaveExploits0References5
Rows per page
Query Builder