Tt2bot

Products

Exploited and recent CVEs

• CVE-2024-36402 Medium 5.3 Unauthenticated writes to the media repository allow planting of problematic content in Matrix Media Repo 0.6%
• CVE-2024-36403 Medium 5.3 Denial of service/high operating costs through unauthenticated downloads in Matrix Media Repo 0.7%
• CVE-2024-52602 Medium 5.0 Server-Side Request Forgery (SSRF) on redirects and federation in Matrix Media Repo 0.6%
• CVE-2024-52791 Medium 5.3 Denial of service through memory exhaustion in Matrix Media Repo 0.8%
• CVE-2024-56515 Medium 6.8 Untrusted file formats can be thumbnailed, invoking potentially further untrusted decoders in Matrix Media Repo 0.7%