Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS14djgzLXg0NDMtN3Jtd84AAy9h
HTML injection in search results via plaintext message highlighting
Impact
Plain text messages containing HTML tags are rendered as HTML in the search results. To exploit this, an attacker needs to trick a user into searching for a specific message containing an HTML injection payload.
Cross-site scripting is possible by including resources from recaptcha.net and gstatic.com which are included in the default CSP.
Thanks to Cadence Ember for finding the injection and to S1m for finding possible XSS vectors.
Patches
Version 3.71.0 of the SDK fixes the issue.
Workarounds
Restarting the client will clear the injection.
Permalink: https://github.com/advisories/GHSA-xv83-x443-7rmwJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14djgzLXg0NDMtN3Jtd84AAy9h
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: about 1 year ago
Updated: 6 months ago
CVSS Score: 8.2
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L
Identifiers: GHSA-xv83-x443-7rmw, CVE-2023-30609
References:
- https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-xv83-x443-7rmw
- https://nvd.nist.gov/vuln/detail/CVE-2023-30609
- https://github.com/matrix-org/matrix-react-sdk/commit/bf182bc94556849d7acdfa0e5fdea2aa129ea826
- https://github.com/matrix-org/matrix-react-sdk/releases/tag/v3.71.0
- https://github.com/advisories/GHSA-xv83-x443-7rmw
Blast Radius: 15.5
Affected Packages
npm:matrix-react-sdk
Dependent packages: 7Dependent repositories: 78
Downloads: 3,293 last month
Affected Version Ranges: < 3.71.0
Fixed in: 3.71.0
All affected versions: 0.0.1, 0.0.2, 0.1.0, 0.2.0, 0.3.0, 0.3.1, 0.4.0, 0.5.0, 0.5.1, 0.5.2, 0.6.0, 0.6.1, 0.6.2, 0.6.3, 0.6.4, 0.6.5, 0.7.1, 0.7.2, 0.7.3, 0.7.4, 0.7.5, 0.8.0, 0.8.1, 0.8.2, 0.8.3, 0.8.4, 0.8.5, 0.8.6, 0.8.7, 0.8.8, 0.8.9, 0.9.0, 0.9.1, 0.9.2, 0.9.3, 0.9.4, 0.9.5, 0.9.6, 0.9.7, 0.10.1, 0.10.2, 0.10.3, 0.10.4, 0.10.5, 0.10.6, 0.10.7, 0.11.0, 0.11.1, 0.11.2, 0.11.3, 0.11.4, 0.12.0, 0.12.1, 0.12.2, 0.12.3, 0.12.4, 0.12.5, 0.12.6, 0.12.7, 0.12.8, 0.12.9, 0.13.0, 0.13.1, 0.13.2, 0.13.3, 0.13.4, 0.13.5, 0.13.6, 0.14.0, 0.14.1, 0.14.2, 0.14.3, 0.14.4, 0.14.5, 0.14.6, 0.14.7, 0.14.8, 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.1.0, 1.1.1, 1.1.2, 1.2.0, 1.2.1, 1.2.2, 1.3.0, 1.3.1, 1.4.0, 1.5.0, 1.5.1, 1.5.2, 1.5.3, 1.6.0, 1.6.1, 1.6.2, 1.7.0, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.7.6, 2.0.0, 2.1.0, 2.1.1, 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.3.0, 2.3.1, 2.5.0, 2.6.0, 2.6.1, 2.7.0, 2.7.1, 2.7.2, 2.8.0, 2.8.1, 2.9.0, 2.10.0, 2.10.1, 3.0.0, 3.1.0, 3.2.0, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.6.0, 3.6.1, 3.7.0, 3.7.1, 3.8.0, 3.9.0, 3.10.0, 3.11.0, 3.11.1, 3.12.0, 3.12.1, 3.13.0, 3.13.1, 3.14.0, 3.15.0, 3.16.0, 3.17.0, 3.18.0, 3.19.0, 3.20.0, 3.21.0, 3.22.0, 3.23.0, 3.24.0, 3.25.0, 3.26.0, 3.27.0, 3.28.0, 3.28.1, 3.29.0, 3.29.1, 3.30.0, 3.31.0, 3.32.0, 3.32.1, 3.33.0, 3.34.0, 3.35.1, 3.36.0, 3.36.1, 3.37.0, 3.38.0, 3.39.0, 3.39.1, 3.40.0, 3.40.1, 3.41.0, 3.41.1, 3.42.0, 3.42.1, 3.42.3, 3.42.4, 3.43.0, 3.44.0, 3.45.0, 3.46.0, 3.47.0, 3.48.0, 3.49.0, 3.50.0, 3.51.0, 3.52.0, 3.53.0, 3.54.0, 3.55.0, 3.56.0, 3.57.0, 3.58.0, 3.58.1, 3.59.0, 3.59.1, 3.60.0, 3.61.0, 3.62.0, 3.63.0, 3.64.0, 3.64.1, 3.64.2, 3.65.0, 3.66.0, 3.67.0, 3.68.0, 3.69.0, 3.69.1, 3.70.0
All unaffected versions: 3.71.0, 3.71.1, 3.72.0, 3.73.0, 3.73.1, 3.74.0, 3.75.0, 3.76.0, 3.77.0, 3.77.1, 3.78.0, 3.79.0, 3.80.0, 3.80.1, 3.81.0, 3.81.1, 3.82.0, 3.83.0, 3.84.0, 3.84.1, 3.85.0, 3.86.0, 3.87.0, 3.88.0, 3.89.0, 3.90.0, 3.91.0, 3.92.0, 3.93.0, 3.94.0, 3.95.0, 3.96.0, 3.96.1, 3.97.0, 3.98.0