User content sandbox can be confused into opening arbitrary documents

TRUNG BÌNH 4.3CVE-2021-21320 · GHSA-52mq-6jcv-j79x · Công bố 02/03/2021 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2021-21320 là lỗ hổng mức TRUNG BÌNH (CVSS 4.3) ảnh hưởng matrix-react-sdk (matrix-react-sdk project), matrix-react-sdk.
Xác suất bị khai thác trong 30 ngày tới (EPSS): 0.92%, cao hơn 60.3% các lỗ hổng khác.
Cách xử lý: cập nhật lên 3.15.0 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
matrix-react-sdk matrix-react-sdk_project	`< 3.15.0`	`3.15.0`
matrix-react-sdk npm	`< 3.15.0`	`3.15.0`

Mô tả

Impact

The user content sandbox can be abused to trick users into opening unexpected documents after several user interactions. The content can be opened with a blob origin from the Matrix client, so it is possible for a malicious document to access user messages and secrets.

Patches

This has been fixed by https://github.com/matrix-org/matrix-react-sdk/pull/5657, which is included in 3.15.0.

Workarounds

There are no known workarounds.

Mô tả của NVD

matrix-react-sdk is an npm package which is a Matrix SDK for React Javascript. In matrix-react-sdk before version 3.15.0, the user content sandbox can be abused to trick users into opening unexpected documents. The content is opened with a `blob` origin that cannot access Matrix user data, so messages and secrets are not at risk. This has been fixed in version 3.15.0.