MA
Product
matrix-appservice-bridge
1
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add matrix-appservice-bridge to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-38691 | 6.5 | Aug 4 | matrix-appservice-bridge doesn't verify the sub parameter of an openId token exhange, allowing unauthorized access to provisioning APIs Affected: >= 4.0.0, < 8.1.2; = 9.0.0 |
Showing 1