What’s Vulnerable › Products

t2bot matrix-media-repo vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your t2bot matrix-media-repo version is affected

Latest t2bot matrix-media-repo vulnerabilities

• CVE-2024-56515 — Untrusted file formats can be thumbnailed, invoking potentially further untrusted decoders in Matrix Media Repo (CVSS 6.5)
• CVE-2024-52791 — Denial of service through memory exhaustion in Matrix Media Repo (CVSS 7.5)
• CVE-2024-52602 — Server-Side Request Forgery (SSRF) on redirects and federation in Matrix Media Repo (CVSS 5.3)
• CVE-2024-36403 — Denial of service/high operating costs through unauthenticated downloads in Matrix Media Repo (CVSS 7.5)
• CVE-2024-36402 — Unauthenticated writes to the media repository allow planting of problematic content in Matrix Media Repo (CVSS 5.3)