Beveiligingsadvies

CVE-2021-32622

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-05-17 19:35:11

Laatst bijgewerkt 2024-08-03 23:25:30

Toegewezen door GitHub_M

CVSS-score 4.2

Status PUBLISHED

Beschrijving

Matrix-React-SDK is a react-based SDK for inserting a Matrix chat/voip client into a web page. Before version 3.21.0, when uploading a file, the local file preview can lead to execution of scripts embedded in the uploaded file. This can only occur after several user interactions to open the preview in a separate tab. This only impacts the local user while in the process of uploading. It cannot be exploited remotely or by other users. This vulnerability is patched in version 3.21.0.

← Alle CVE's bekijken Bekijk op cve.org ↗