Lucene search
Veracode Vulnerability DatabaseVERACODE:42707HistoryAug 10, 2023 - 11:37 p.m.
Information Disclosure
2023-08-1023:37:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
vulnerable
information disclosure
messaging event
bridged room
sensitive information
software
CVSS3
3.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
35.0%
matrix-appservice-irc is vulnerable to Information Disclosure. Using an event ID as a target, an attacker is able to leak a portion of a specified messaging event from another bridged room, resulting in disclosure of sensitive information.
Related
prion
prion
Code injection
2023-08-04 19:15:00
github
github
cvelist
cvelist
osv
osv
matrix-appservice-irc events can be crafted to leak parts of targeted messages from other bridged rooms
2023-08-04 17:26:07
CVE-2023-38700
2023-08-04 19:15:09
cve
cve
CVE-2023-38700
2023-08-04 19:15:09
nvd
nvd
CVE-2023-38700
2023-08-04 19:15:09
CVSS3
3.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
35.0%
Related for VERACODE:42707