Read the docs

Matrix-react-sdk Project

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Matrix-react-sdk Project records in CISA KEV

No Matrix-react-sdk Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records in Matrix-react-sdk · all components

TI-2023-12682 CVE-2023-28103 · GHSA-6g43-88cp-w5gv

Prototype pollution in matrix-react-sdk

Priority MEDIUM 43

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00712 Published 2023-03-28 Fixed in 3.69.0 CWE-1321
TI-2023-18889 CVE-2023-37259 · GHSA-c9vx-2g7w-rp65

Cross site scripting in Export Chat feature

Priority LOW 28

matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page.

CVSS 3.1MEDIUM 6.1 Adjacent network Low privileges User interaction EPSS 0.00452 Published 2023-07-18 Fixed in 3.76.0 CWE-79
Open these records in search →