Security Advisory

CVE-2024-52594

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-01-16 18:57:29

Last updated 2025-02-12 20:31:20

Assigner GitHub_M

State PUBLISHED

Description

Gomatrixserverlib is a Go library for matrix federation. Gomatrixserverlib is vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions. The commit `c4f1e01` fixes this issue. Users are advised to upgrade. Users unable to upgrade should use a local firewall to limit the network segments and hosts the service using gomatrixserverlib can access.

← Browse all CVEs View on cve.org ↗