vulnerability
Oracle Linux: CVE-2023-28427: ELSA-2023-1802: thunderbird security update (IMPORTANT) (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:H/Au:N/C:C/I:C/A:C) | 2023-03-28 | 2023-04-18 | 2025-01-07 |
Severity
8
CVSS
(AV:N/AC:H/Au:N/C:C/I:C/A:C)
Published
2023-03-28
Added
2023-04-18
Modified
2025-01-07
Description
matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data presented to the consumer. This vulnerability is distinct from GHSA-rfv9-x7hh-xc32 which covers a similar issue. The issue has been patched in matrix-js-sdk 24.0.0 and users are advised to upgrade. There are no known workarounds for this vulnerability.
The Mozilla Foundation Security Advisory describes this flaw as:
Thunderbird users who use the Matrix chat protocol were vulnerable to a denial-of-service attack.
The Mozilla Foundation Security Advisory describes this flaw as:
Thunderbird users who use the Matrix chat protocol were vulnerable to a denial-of-service attack.
Solution
oracle-linux-upgrade-thunderbird
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.