matrix-org gomatrixserverlib vulnerabilities (CVE)

CVE records published for matrix-org gomatrixserverlib, newest first. Follow to get an email when a new one appears.

1 results

4.3Medium

CVE-2024-52594 1 year ago

Server-Side Request Forgery (SSRF) on redirects and federation in gomatrixserverlib

matrix-org gomatrixserverlib

Gomatrixserverlib is a Go library for matrix federation. Gomatrixserverlib is vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions. The commit `c4f1e01` fixes this issue. Users are advised t…