CVE-2024-47824
1 advisory.
npm/matrix-react-sdk CVE-2024-47824: unknown 0
Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room
Action: Upgrade matrix-react-sdk to 3.102.0 or later.
npm i matrix-react-sdk@3.102.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.18.0 | 3.102.0 | - |
Fixed versions
| 3.102.0 |
Sources
- osv: GHSA-qcvh-p9jq-wp8v
- https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-qcvh-p9jq-wp8v
- https://nvd.nist.gov/vuln/detail/CVE-2024-47824
- https://github.com/matrix-org/matrix-react-sdk/pull/12618
- https://github.com/matrix-org/matrix-react-sdk/commit/6fc9d7641c51ca3db8225cf58b9d6e6fdd2d6556
- https://github.com/matrix-org/matrix-react-sdk
CVE-2024-47824 · published · modified · JSON