Vulnerability · Published Jan 16, 2025 · Assigned by GitHub_M

CVE-2024-52602Server-Side Request Forgery (SSRF) on redirects and federation in Matrix Media Repo

Medium 5.0

In plain English

A medium-severity server-side request forgery in matrix-media-repo from t2bot. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.0Medium

Exploit odds (30 days)0.6%top 51.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Matrix Media Repo (MMR) is a highly configurable multi-homeserver media repository for Matrix. Matrix Media Repo (MMR) is vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions. This is fixed in MMR v1.3.8. Users are advised to upgrade. Restricting which hosts MMR is allowed to contact via (local) firewall rules or a transparent proxy and may provide a workaround for users unable to upgrade.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Go	github.com/t2bot/matrix-media-repo	1.3.8	GO-2025-3399
Go	github.com/t2bot/matrix-media-repo	1.3.8	GHSA-r6jg-jfv6-2fjv

Affected products (as reported)

Vendor	Product	Versions
t2bot	matrix-media-repo	< 1.3.8

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

References

https://github.com/t2bot/matrix-media-repo/security/advisories/GHSA-r6jg-jfv6-2fjv x_refsource_CONFIRM
https://github.com/t2bot/matrix-media-repo/releases/tag/v1.3.8 x_refsource_MISC
https://learn.snyk.io/lesson/ssrf-server-side-request-forgery x_refsource_MISC
https://owasp.org/www-community/attacks/Server_Side_Request_Forgery x_refsource_MISC
https://www.agwa.name/blog/post/preventing_server_side_request_forgery_in_golang x_refsource_MISC