Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Starting with version 17.1.0-rc.1, improperly formed beacon events can disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data presented to the consumer. This is patched in matrix-js-sdk v19.7.0. Redacting applicable events, waiting for the sync processor to store data, and restarting the client are possible workarounds. Alternatively, redacting the applicable events and clearing all storage will fix the further perceived issues. Downgrading to an unaffected version, noting that such a version may be subject to other vulnerabilities, will additionally resolve the issue.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade thunderbird | Oct 27, 2022 | Sep 28, 2022 |
| Alpine Linux | — | Upgrade element-webUpgrade riot-web | Aug 22, 2024 | Sep 28, 2022 |
| Amazon Linux Ami 2 | — | Upgrade thunderbird-debuginfoUpgrade thunderbird | Dec 7, 2022 | Sep 28, 2022 |
| Centos_linux | — | Upgrade thunderbird-debuginfoUpgrade thunderbird-debugsourceUpgrade thunderbird | Oct 26, 2022 | Sep 28, 2022 |
| Debian | — | No solution exists | May 15, 2025 | Sep 28, 2022 |
| Freebsd | — | Upgrade element-webUpgrade cinny | Nov 4, 2022 | Sep 28, 2022 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin. | Nov 1, 2022 | Sep 28, 2022 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 102.3.1 | Sep 30, 2022 | Sep 28, 2022 |
| Oracle_linux | — | Upgrade thunderbird | Oct 27, 2022 | Sep 28, 2022 |
| Redhat_linux | — | Upgrade thunderbirdUpgrade thunderbird-debugsourceUpgrade thunderbird-debuginfoNo solution exists | Oct 26, 2022 | Sep 28, 2022 |
| Rocky_linux | — | Upgrade thunderbird-debuginfoUpgrade thunderbird-debugsourceUpgrade thunderbird | Mar 12, 2024 | Sep 28, 2022 |
| Suse | — | Upgrade mozillathunderbirdUpgrade mozillathunderbird-translations-otherUpgrade mozillathunderbird-translations-common | Oct 28, 2022 | Sep 28, 2022 |
| Ubuntu | — | Upgrade thunderbird | Nov 12, 2022 | Sep 28, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub