Description
An attacker cooperating with a malicious homeserver can construct messages appearing to have come from another person. Such messages will be marked with a grey shield on some platforms, but this may be missing in others.
This attack is possible due to the matrix-js-sdk implementing a too permissive key forwarding strategy on the receiving end.
Recommendation
Update the matrix-js-sdk package to the latest compatible version. Followings are version details:
- Affected version(s): < 19.7.0
- Patched version(s): 19.7.0
References
Could your website be exposed too?
SmartScanner can check your website for matrix-js-sdk subject to impersonated messages due to permissive key forwarding and gives you actionable findings to investigate.
Start a free scanRelated Issues
- matrix-js-sdk subject to user impersonation due to key/device identifier confusion in SAS verification - CVE-2022-39250
- matrix-js-sdk subject to user spoofing via Olm/Megolm protocol confusion - CVE-2022-39251
- Matrix JavaScript SDK's key history sharing could share keys to malicious devices - CVE-2024-47080
- matrix-js-sdk Prototype Pollution vulnerability - CVE-2022-36059
You might also like:
See something that needs correcting? Let us knowUpdated January 30, 2023