Matrix-react-sdk Project
Matrix-react-sdk Project Matrix-react-sdk: vulnerabilidades y CVE
Matrix-react-sdk Project Matrix-react-sdk tiene 5 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE5
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-37259 | Media (5.4) | 0.45% | — | 18 jul 2023 | matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. The Export Chat feature includes certain attacker-controlled elements in the generated document without sufficient escaping,… |
| CVE-2023-30609 | Media (4.7) | 0.62% | — | 25 abr 2023 | matrix-react-sdk is a react-based SDK for inserting a Matrix chat/VoIP client into a web page. Prior to version 3.71.0, plain text messages containing HTML tags are rendered as HTML in the search results. To exploit… |
| CVE-2023-28103 | Alta (8.2) | 0.71% | — | 28 mar 2023 | matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. In certain configurations, data sent by remote servers containing special strings in key locations could cause modifications of the… |
| CVE-2021-32622 | Alta (7.8) | 0.37% | — | 17 may 2021 | Matrix-React-SDK is a react-based SDK for inserting a Matrix chat/voip client into a web page. Before version 3.21.0, when uploading a file, the local file preview can lead to execution of scripts embedded in the… |
| CVE-2021-21320 | Media (4.3) | 0.92% | — | 2 mar 2021 | matrix-react-sdk is an npm package which is a Matrix SDK for React Javascript. In matrix-react-sdk before version 3.15.0, the user content sandbox can be abused to trick users into opening unexpected documents. The… |