User content sandbox can be confused into opening arbitrary documents

中 4.3CVE-2021-21320 · GHSA-52mq-6jcv-j79x · 02/03/2021 公開 · 17/06/2026 更新

要点

CVE-2021-21320 は matrix-react-sdk (matrix-react-sdk project), matrix-react-sdk に影響する深刻度「中」 (CVSS 4.3) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.92%（全脆弱性の 60.3% より高い）。
対処：3.15.0 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
matrix-react-sdk matrix-react-sdk_project	`< 3.15.0`	`3.15.0`
matrix-react-sdk npm	`< 3.15.0`	`3.15.0`

概要

Impact

The user content sandbox can be abused to trick users into opening unexpected documents after several user interactions. The content can be opened with a blob origin from the Matrix client, so it is possible for a malicious document to access user messages and secrets.

Patches

This has been fixed by https://github.com/matrix-org/matrix-react-sdk/pull/5657, which is included in 3.15.0.

Workarounds

There are no known workarounds.

NVD の説明

matrix-react-sdk is an npm package which is a Matrix SDK for React Javascript. In matrix-react-sdk before version 3.15.0, the user content sandbox can be abused to trick users into opening unexpected documents. The content is opened with a `blob` origin that cannot access Matrix user data, so messages and secrets are not at risk. This has been fixed in version 3.15.0.