Parsing issue in matrix-org/node-irc leading to room takeovers

CAO 8.8CVE-2022-39203 · GHSA-xvqg-mv25-rwvw · Công bố 13/09/2022 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2022-39203 là lỗ hổng mức CAO (CVSS 8.8) ảnh hưởng matrix irc bridge (matrix), matrix-appservice-irc.
Xác suất bị khai thác trong 30 ngày tới (EPSS): 0.86%, cao hơn 58.6% các lỗ hổng khác.
Cách xử lý: cập nhật lên 0.35.0 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
matrix irc bridge matrix	`< 0.35.0`	`0.35.0`
matrix-appservice-irc npm	`< 0.35.0`	`0.35.0`

Mô tả

Impact

Attackers can specify a specific string of characters, which would confuse the bridge into combining an attacker-owned channel and an existing channel, allowing them to grant themselves permissions in the channel.

Patched

The vulnerability has been patched in matrix-appservice-irc 0.35.0.

Workarounds

Disable dynamic channel joining via dynamicChannels.enabled to prevent users from joining new channels, which prevents any new channels being bridged outside of what is already bridged, and what is specified in the config.

References

https://matrix.org/blog/2022/09/13/security-release-of-matrix-appservice-irc-0-35-0-high-severity

Credits

Discovered and reported by Val Lorentz.

For more information

If you have any questions or comments about this advisory email us at [email protected].

Mô tả của NVD

matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. Attackers can specify a specific string of characters, which would confuse the bridge into combining an attacker-owned channel and an existing channel, allowing them to grant themselves permissions in the channel. The vulnerability has been patched in matrix-appservice-irc 0.35.0. As a workaround operators may disable dynamic channel joining via `dynamicChannels.enabled` to prevent users from joining new channels, which prevents any new channels being bridged outside of what is already bridged, and what is specified in the config.