Server-Side Request Forgery

🗓️ 18 Jan 2025 20:23:34Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 7 Views

Gomatrixserverlib is vulnerable to server-side request forgery due to improper network request validation.

Reporter	Title	Published	Views	Family All 47
AlpineLinux	CVE-2024-52594	16 Jan 202518:57	–	alpinelinux
FreeBSD	dendrite -- Server-side request forgery vulnerability	16 Jan 202500:00	–	freebsd
Circl	CVE-2024-52594	16 Jan 202519:15	–	circl
CNNVD	gomatrixserverlib 代码问题漏洞	16 Jan 202500:00	–	cnnvd
CVE	CVE-2024-52594	16 Jan 202518:57	–	cve
Cvelist	CVE-2024-52594 Server-Side Request Forgery (SSRF) on redirects and federation in gomatrixserverlib	16 Jan 202518:57	–	cvelist
EUVD	EUVD-2025-0090	3 Oct 202520:07	–	euvd
Tenable Nessus	FreeBSD : dendrite -- Server-side request forgery vulnerability (cd2ace09-df23-11ef-a205-901b0e9408dc)	30 Jan 202500:00	–	nessus
Tenable Nessus	SUSE SLES15 / openSUSE 15 Security Update : govulncheck-vulndb (SUSE-SU-2025:0297-1)	3 Feb 202500:00	–	nessus
Github Security Blog	Gomatrixserverlib Server-Side Request Forgery (SSRF) on redirects and federation	16 Jan 202523:08	–	github

Vulners

Node

matrix dendriteMatch0.13.2-r1go

AND

matrix dendriteMatch0.13.7-r1go

AND

matrix dendriteMatch0.3.11-r1go

AND

matrix dendriteMatch0.4.1-r0go

AND

matrix dendriteMatch0.5.1-r0go

AND

matrix dendriteMatch0.11.0-r1go

AND

matrix dendriteMatch0.13.8-r0go

AND

matrix dendriteMatch0.13.6-r2go

AND

matrix dendriteMatch0.12.0-r1go

AND

matrix dendriteMatch0.11.0-r2go

AND

matrix dendriteMatch0.13.3-r0go

AND

matrix dendriteMatch0.13.3-r1go

AND

matrix dendriteMatch0.10.4-r0go

AND

matrix dendriteMatch0.8.1-r2go

AND

matrix dendriteMatch0.13.1-r1go

AND

matrix dendriteMatch0.8.9-r0go

AND

matrix dendriteMatch0.6.2-r0go

AND

matrix dendriteMatch0.10.2-r0go

AND

matrix dendriteMatch0.10.1-r0go

AND

matrix dendriteMatch0.7.0-r0go

AND

matrix dendriteMatch0.13.6-r0go

AND

matrix dendriteMatch0.13.6-r1go

AND

matrix dendriteMatch0.10.8-r1go

AND

matrix dendriteMatch0.10.5-r0go

AND

matrix dendriteMatch0.9.2-r0go

AND

matrix dendriteMatch0.9.5-r0go

AND

matrix dendriteMatch0.4.0-r0go

AND

matrix dendriteMatch0.6.3-r0go

AND

matrix dendriteMatch0.8.9-r2go

AND

matrix dendriteMatch0.10.3-r0go

AND

matrix dendriteMatch0.10.1-r1go

AND

matrix dendriteMatch0.11.0-r0go

AND

matrix dendriteMatch0.8.2-r1go

AND

matrix dendriteMatch0.6.5-r0go

AND

matrix dendriteMatch0.9.4-r0go

AND

matrix dendriteMatch0.13.4-r0go

AND

matrix dendriteMatch0.12.0-r2go

AND

matrix dendriteMatch0.5.1-r1go

AND

matrix dendriteMatch0.13.7-r2go

AND

matrix dendriteMatch0.10.8-r0go

AND

matrix dendriteMatch0.9.8-r0go

AND

matrix dendriteMatch0.9.9-r0go

AND

matrix dendriteMatch0.3.11-r0go

AND

matrix dendriteMatch0.13.7-r0go

AND

matrix dendriteMatch0.12.0-r0go

AND

matrix dendriteMatch0.8.5-r0go

AND

matrix dendriteMatch0.14.0-r2go

AND

matrix dendriteMatch0.10.0-r0go

AND

matrix dendriteMatch0.6.4-r0go

AND

matrix dendriteMatch0.5.0-r1go

AND

matrix dendriteMatch0.6.5-r1go

AND

matrix dendriteMatch0.13.1-r0go

AND

matrix dendriteMatch0.10.7-r0go

AND

matrix dendriteMatch0.13.7-r3go

AND

matrix dendriteMatch0.5.0-r0go

AND

matrix dendriteMatch0.8.2-r0go

AND

matrix dendriteMatch0.8.8-r0go

AND

matrix dendriteMatch0.12.3-r0go

AND

matrix dendriteMatch0.8.9-r1go

AND

matrix dendriteMatch0.9.6-r0go

AND

matrix dendriteMatch0.13.0-r0go

AND

alpinelinux alpine_linuxMatchedge

matrix dendriteMatch0.13.8-r1go

AND

matrix dendriteMatch0.13.8-r0go

AND

alpinelinux alpine_linuxMatch3.21

matrix-org github.com/matrix-org/gomatrixserverlibMatchheadgo

Source	Link
pkg	www.pkg.go.dev/vuln/GO-2025-3396
github	www.github.com/matrix-org/gomatrixserverlib/commit/c4f1e01eab0dd435709ad15463ed38a079ad6128
github	www.github.com/matrix-org/gomatrixserverlib/security/advisories/GHSA-4ff6-858j-r822

28 Jan 2025 04:18Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.14.3

EPSS0.00109

SSVC