Vulnerability · Published Aug 4, 2023 · Assigned by GitHub_M

CVE-2023-38700matrix-appservice-irc events can be crafted to leak parts of targeted messages from other bridged rooms

Low 3.5

In plain English

A low-severity information exposure in matrix-appservice-irc from matrix-org. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)3.5Low

Exploit odds (30 days)0.6%top 51.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

matrix-appservice-irc is a Node.js IRC bridge for Matrix. Prior to version 1.0.1, it was possible to craft an event such that it would leak part of a targeted message event from another bridged room. This required knowing an event ID to target. Version 1.0.1n fixes this issue. As a workaround, set the `matrixHandler.eventCacheSize` config value to `0`. This workaround may impact performance.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	matrix-appservice-irc	1.0.1	GHSA-c7hh-3v6c-fj4q

Affected products (as reported)

Vendor	Product	Versions
matrix-org	matrix-appservice-irc	< 1.0.1

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

References

https://github.com/matrix-org/matrix-appservice-irc/security/advisories/GHSA-c7hh-3v6c-fj4q x_refsource_CONFIRM
https://github.com/matrix-org/matrix-appservice-irc/commit/8bbd2b69a16cbcbeffdd9b5c973fd89d61498d75 x_refsource_MISC
https://github.com/matrix-org/matrix-appservice-irc/releases/tag/1.0.1 x_refsource_MISC