Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-70124
HistorySep 02, 2021 - 12:00 a.m.

Matrix Information Breach Vulnerability

2021-09-0200:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
matrix
information disclosure
authentication
access privileges
attacker
sensitive information

EPSS

0.001

Percentile

35.6%

Matrix is an ambitious new ecosystem for open federated instant messaging and VoIP. Matrix suffers from an information disclosure vulnerability that stems from the product not doing valid authentication of access user privileges. An attacker could access members’ sensitive information via another room’s ID.