Threat database

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.8%	CVE-2024-50336matrix-js-sdk · Path Traversal Medium5.3EPSS 0.8%2024-11-12CVE Database V5CVE-2024-50336 matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript.matrix-js-sdk before 34.11.0 is vulnerable to client-side path traversal via crafted MXC URIs. A malicious room member can trigger clients based on the matrix-js-sdk to issue arbitrary authenticated GET requests to the client's homeserver. Fixed in matrix-js-sdk 34.11.1. EPSS 0.8%Vulnerability matrix-org CWE-22	CVE Database V5	2024-11-12

Page 1 of 1