CVE-2022-39249Improper Authentication in Matrix-js-sdk

Severity
7.5HIGHNVD
OSV5.5
EPSS
0.5%
top 34.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 28
Latest updateNov 11

Description

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Prior to version 19.7.0, an attacker cooperating with a malicious homeserver can construct messages appearing to have come from another person. Such messages will be marked with a grey shield on some platforms, but this may be missing in others. This attack is possible due to the matrix-js-sdk implementing a too permissive key forwarding strategy on the receiving end. Starting with version 19.7.0, the default policy for accept

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

NVDmatrix/javascript_sdk< 19.7.0
CVEListV5matrix-org/matrix-js-sdk< 19.7.0
Ubuntumozilla/thunderbird< 1:102.4.2+build2-0ubuntu0.18.04.1+2

Patches

🔴Vulnerability Details

5
OSV
thunderbird vulnerabilities2022-11-11
GHSA
matrix-js-sdk subject to impersonated messages due to permissive key forwarding2022-09-30
OSV
matrix-js-sdk subject to impersonated messages due to permissive key forwarding2022-09-30
CVEList
Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions2022-09-28
OSV
CVE-2022-39249: Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript2022-09-28

📋Vendor Advisories

4
Ubuntu
Thunderbird vulnerabilities2022-11-11
Red Hat
Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack by malicious server administrators2022-09-28
Debian
CVE-2022-39249: node-matrix-js-sdk - Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Prior to v...2022
Mozilla
Mozilla Foundation Security Advisory 2022-43: CVE-2022-39249
CVE-2022-39249 — Improper Authentication | cvebase