-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerable functions are likely those that handle MXC URIs. The matrix-js-sdk's failure to validate() the server-name and media-id components of these URIs is the root of the vulnerability. Functions like parseMxCUri and getHttpUriForMxc are potential candidates because they are involved in processing MXC URIs.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| matrix-js-sdk | npm | < 34.11.1 | 34.11.1 |
JavaScriptJavaScriptOngoing coverage of React2Shell