CVE-2021-32659
1 advisory.
npm/matrix-appservice-bridge CVE-2021-32659: medium 6.5, EPSS 0.94%
Automatic room upgrade handling can be used maliciously to bridge a room non-consentually
Action: Upgrade matrix-appservice-bridge to 2.6.1 or later.
npm i matrix-appservice-bridge@2.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.1 | - |
Fixed versions
| 2.6.1 |
Sources
- osv: GHSA-35g4-qx3c-vjhx
- https://github.com/matrix-org/matrix-appservice-bridge/security/advisories/GHSA-35g4-qx3c-vjhx
- https://nvd.nist.gov/vuln/detail/CVE-2021-32659
- https://github.com/matrix-org/matrix-appservice-bridge/pull/330
- https://github.com/matrix-org/matrix-appservice-bridge/commit/b69e745584a34fcfd858df33e4631e420da07b9f
- https://github.com/matrix-org/matrix-appservice-bridge/releases/tag/2.6.1
CVE-2021-32659 · published · modified · JSON