Vulnerabilities

TI-2024-25682 CVE-2024-38432 · GHSA-p8cq-42f6-5q3j

Matrix – Tafnit v8 CWE-646: Reliance on File Name or Extension of Externally-Supplied File

MEDIUM 41

Matrix Tafnit v8 - CWE-646: Reliance on File Name or Extension of Externally-Supplied File

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00173 Published 2024-07-30 Fixed in 8.4.202 CWE-646

TI-2024-25681 CVE-2024-38431 · GHSA-9hx9-q6rp-5gwc

LOW 39

Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0035 Published 2024-07-30 Fixed in 8.4.202 CWE-204

TI-2024-25680 CVE-2024-38430 · GHSA-74x4-mhf3-mff8

LOW 27

Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00254 Published 2024-07-30 Fixed in 8.4.202 CWE-79

TI-2024-25679 CVE-2024-38429 · GHSA-8qr4-jvqh-chvp

LOW 35

Matrix Tafnit v8 - CWE-552: Files or Directories Accessible to External Parties

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00402 Published 2024-07-30 Fixed in 8.4.202 CWE-552