What’s Vulnerable › Products

matrix-org matrix-appservice-bridge vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your matrix-org matrix-appservice-bridge version is affected

Latest matrix-org matrix-appservice-bridge vulnerabilities

• CVE-2023-38691 — matrix-appservice-bridge doesn't verify the sub parameter of an openId token exhange, allowing unauthorized access to provisioning APIs (CVSS 6.5)
• CVE-2021-32659 — Automatic room upgrade handling can be used maliciously to bridge a room non-consentually (CVSS 4.9)