Vulnerabilities

TI-2022-18633 CVE-2022-39257

Matrix iOS SDK vulnerable to impersonation via forwarded Megolm sessions

MEDIUM 41

Matrix iOS SDK allows developers to build iOS apps compatible with Matrix.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00996 Published 2022-09-28 Fixed in 0.23.19 CWE-287

TI-2022-18631 CVE-2022-39255

MEDIUM 45

Matrix iOS SDK allows developers to build iOS apps compatible with Matrix.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01025 Published 2022-09-28 Fixed in 0.23.19 CWE-287

TI-2022-18624 CVE-2022-39248 · GHSA-fpgf-pjjv-2qgm

MEDIUM 45

matrix-android-sdk2 is the Matrix SDK for Android.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00996 Published 2022-09-28 Fixed in 1.5.1 CWE-287

TI-2022-18623 CVE-2022-39246 · GHSA-2pvj-p485-cp3m

MEDIUM 40

matrix-android-sdk2 is the Matrix SDK for Android.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00866 Published 2022-09-28 Fixed in 1.5.1 CWE-287