matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. In certain configurations, data sent by remote servers containing special strings in key locations could cause modifications of the `Object.prototype`, disrupting matrix-react-sdk functionality, causing denial of service and potentially affecting program logic. This is fixed in matrix-react-sdk 3.69.0 and users are advised to upgrade. There are no known workarounds for this vulnerability. Note this advisory is distinct from GHSA-2x9c-qwgf-94xr which refers to a similar issue.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. In certain configurations, data sent
    by remote servers containing special strings in key locations could cause modifications of the
    `Object.prototype`, disrupting matrix-react-sdk functionality, causing denial of service and potentially
    affecting program logic. This is fixed in matrix-react-sdk 3.69.0 and users are advised to upgrade. There
    are no known workarounds for this vulnerability. Note this advisory is distinct from GHSA-2x9c-qwgf-94xr
    which refers to a similar issue. (CVE-2023-28103)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. In certain configurations, data sent
    by remote servers containing special strings in key locations could cause modifications of the
    `Object.prototype`, disrupting matrix-react-sdk functionality, causing denial of service and potentially
    affecting program logic. This is fixed in matrix-react-sdk 3.69.0 and users are advised to upgrade. There
    are no known workarounds for this vulnerability. Note this advisory is distinct from GHSA-2x9c-qwgf-94xr
    which refers to a similar issue. (CVE-2023-28103)

  - matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0
    events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from
    functioning properly, potentially impacting the consumer's ability to process data safely. Note that the
    matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data presented to
    the consumer. This vulnerability is distinct from GHSA-rfv9-x7hh-xc32 which covers a similar issue. The
    issue has been patched in matrix-js-sdk 24.0.0 and users are advised to upgrade. There are no known
    workarounds for this vulnerability. (CVE-2023-28427)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 5b0ae405-cdc7-11ed-bb39-901b0e9408dc advisory.

  - matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. In certain configurations, data sent     by remote servers containing special strings in key locations could cause modifications of the     `Object.prototype`, disrupting matrix-react-sdk functionality, causing denial of service and potentially     affecting program logic. This is fixed in matrix-react-sdk 3.69.0 and users are advised to upgrade. There     are no known workarounds for this vulnerability. Note this advisory is distinct from GHSA-2x9c-qwgf-94xr     which refers to a similar issue. (CVE-2023-28103)

  - matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0     events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from     functioning properly, potentially impacting the consumer's ability to process data safely. Note that the     matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data presented to     the consumer. This vulnerability is distinct from GHSA-rfv9-x7hh-xc32 which covers a similar issue. The     issue has been patched in matrix-js-sdk 24.0.0 and users are advised to upgrade. There are no known     workarounds for this vulnerability. (CVE-2023-28427)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
411419	SCA: security update for matrix-react-sdk (GHSA-6g43-88cp-w5gv)	Tenable Cloud Security	SCA Checks	high
411419	SCA: security update for matrix-react-sdk (GHSA-6g43-88cp-w5gv)	Tenable Self-Hosted Container Security	SCA Checks	high
406929	Alpine: riot-web: security update to 1.11.26-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
406929	Alpine: riot-web: security update to 1.11.26-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
404214	Alpine: element-web: security update to 1.11.26-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
404214	Alpine: element-web: security update to 1.11.26-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
173613	FreeBSD : Matrix clients -- Prototype pollution in matrix-js-sdk (5b0ae405-cdc7-11ed-bb39-901b0e9408dc)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2023-28103

high

Tenable Plugins

high

high

high

high

high

high

high