Vulnerabilities

TI-2023-18889 CVE-2023-37259 · GHSA-c9vx-2g7w-rp65

Cross site scripting in Export Chat feature

LOW 28

matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page.

CVSS 3.1MEDIUM 6.1 Adjacent network Low privileges User interaction EPSS 0.00452 Published 2023-07-18 Fixed in 3.76.0 CWE-79

TI-2023-14425 CVE-2023-30609 · GHSA-xv83-x443-7rmw

LOW 25

matrix-react-sdk is a react-based SDK for inserting a Matrix chat/VoIP client into a web page.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00617 Published 2023-04-25 Fixed in 3.71.0 CWE-74

TI-2023-12682 CVE-2023-28103 · GHSA-6g43-88cp-w5gv

MEDIUM 43

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00712 Published 2023-03-28 Fixed in 3.69.0 CWE-1321

TI-2021-12291 CVE-2021-32622 · GHSA-cg57-p69r-3m7p

LOW 34

Matrix-React-SDK is a react-based SDK for inserting a Matrix chat/voip client into a web page.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00373 Published 2021-05-17 Fixed in 3.21.0 CWE-74

TI-2021-04420 CVE-2021-21320 · GHSA-52mq-6jcv-j79x

LOW 22

matrix-react-sdk is an npm package which is a Matrix SDK for React Javascript.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00922 Published 2021-03-02 Fixed in 3.15.0 CWE-345