Lucene search
Veracode Vulnerability DatabaseVERACODE:40032HistoryApr 04, 2023 - 9:55 a.m.
Prototype Pollution
2023-04-0409:55:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
27
matrix-js-sdk
prototype pollution
events
library
data safety
EPSS
0.005
Percentile
75.6%
matrix-js-sdk is vulnerable to Prototype Pollution. Events sent with special strings in key places may disrupt or impede the library from functioning properly, potentially impacting the consumer’s ability to process data safely.
References
github.com/matrix-org/matrix-js-sdk/commit/9a504af18e7e7409016a1ff2b1e4d95f398d8393
github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-mwq8-fjpf-c2gr
lists.debian.org/debian-lts-announce/2023/04/msg00027.html
matrix.org/blog/2023/03/28/security-releases-matrix-js-sdk-24-0-0-and-matrix-react-sdk-3-69-0
security.gentoo.org/glsa/202305-36
www.debian.org/security/2023/dsa-5392
Related
kaspersky
kaspersky
KLA48708 DoS vulnerability in Mozilla Thunderbird
2023-03-28 00:00:00
nessus
nessus
Fedora 38 : thunderbird (2023-a9c17dff60)
2023-04-04 00:00:00
Fedora 36 : thunderbird (2023-0e1ae0d5f6)
2023-04-14 00:00:00
Mozilla Thunderbird < 102.9.1
2023-03-29 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerability
2023-04-11 22:02:20
osv
osv
element-web-1.11.26-1.1 on GA media
2024-06-15 00:00:00
CVE-2023-28427
2023-03-28 21:15:11
Prototype pollution in matrix-js-sdk (part 2)
2023-03-30 20:19:18
nvd
nvd
CVE-2023-28427
2023-03-28 21:15:11
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 102.9.1 — Mozilla
2023-03-28 00:00:00
cvelist
cvelist
CVE-2023-28427 Prototype pollution in matrix-js-sdk
2023-03-28 20:32:22
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0132)
2023-04-12 00:00:00
Mozilla Thunderbird Security Advisory (MFSA2023-12) - Mac OS X
2023-03-31 00:00:00
Mozilla Thunderbird Security Advisory (MFSA2023-12) - Windows
2023-03-31 00:00:00
debiancve
debiancve
CVE-2023-28427
2023-03-28 21:15:11
slackware
slackware
[slackware-security] mozilla-thunderbird
2023-03-29 21:19:17
alpinelinux
alpinelinux
CVE-2023-28427
2023-03-28 21:15:11
prion
prion
Design/Logic Flaw
2023-03-28 21:15:00
ubuntucve
ubuntucve
CVE-2023-28427
2023-03-28 00:00:00
redhatcve
redhatcve
CVE-2023-28427
2023-03-30 17:43:02
cve
cve
CVE-2023-28427
2023-03-28 21:15:11
freebsd
freebsd
Matrix clients -- Prototype pollution in matrix-js-sdk
2023-03-28 00:00:00
github
github
Prototype pollution in matrix-js-sdk (part 2)
2023-03-30 20:19:18
oraclelinux
oraclelinux
thunderbird security update
2023-04-18 00:00:00
thunderbird security update
2023-04-18 00:00:00
thunderbird security update
2023-04-18 00:00:00
rocky
rocky
thunderbird security update
2023-04-26 15:29:00
thunderbird security update
2023-04-26 15:28:13
debian
debian
[SECURITY] [DLA 3400-1] thunderbird security update
2023-04-24 08:55:14
[SECURITY] [DSA 5392-1] thunderbird security update
2023-04-22 16:10:59
almalinux
almalinux
Important: thunderbird security update
2023-04-17 00:00:00
Important: thunderbird security update
2023-04-17 00:00:00
redhat
redhat
(RHSA-2023:1804) Important: thunderbird security update
2023-04-17 13:44:12
(RHSA-2023:1810) Important: thunderbird security update
2023-04-17 13:55:45
(RHSA-2023:1805) Important: thunderbird security update
2023-04-17 13:45:46
centos
centos
thunderbird security update
2023-04-24 14:49:28
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2023-05-30 00:00:00