Vulnerabilities

TI-2024-24188 CVE-2024-36402 · GHSA-8vmr-h7h5-cqhg

Unauthenticated writes to the media repository allow planting of problematic content in Matrix Media Repo

MEDIUM 63

Matrix Media Repo (MMR) is a highly configurable multi-homeserver media repository for Matrix.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00564 Published 2025-01-16 Fixed in 1.3.5 CWE-287

TI-2024-24189 CVE-2024-36403 · GHSA-vc2m-hw89-qjxf

MEDIUM 40

Matrix Media Repo (MMR) is a highly configurable multi-homeserver media repository for Matrix.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0071 Published 2025-01-16 Fixed in 1.3.5 CWE-770

TI-2024-35262 CVE-2024-52602 · GHSA-r6jg-jfv6-2fjv

MEDIUM 57

Matrix Media Repo (MMR) is a highly configurable multi-homeserver media repository for Matrix.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00588 Published 2025-01-16 Fixed in 1.3.8 CWE-918

TI-2024-35305 CVE-2024-52791 · GHSA-gp86-q8hg-fpxj

MEDIUM 40

Matrix Media Repo (MMR) is a highly configurable multi-homeserver media repository for Matrix.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00787 Published 2025-01-16 Fixed in 1.3.8 CWE-789

TI-2024-37402 CVE-2024-56515 · GHSA-rcxc-wjgw-579r

LOW 31

Matrix Media Repo (MMR) is a highly configurable multi-homeserver media repository for Matrix.

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.0065 Published 2025-01-16 Fixed in 1.3.8 CWE-502