matrix-appservice-irc vulnerabilities
3 known vulnerabilities in matrix-appservice-irc from Matrix-org. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
matrix-appservice-irc is a Node.js IRC bridge for Matrix.
matrix-appservice-irc is a Node.js IRC bridge for Matrix. Prior to version 1.0.1, it is possible to craft a command with newlines which would not be properly parsed. This would mean you could pass a string of commands as a channel name, which would then be run
- 8.8 High severity
matrix-appservice-irc: Improper Privilege Management
matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. Attackers can specify a specific string of characters, which would confuse the bridge into combining an attacker-owned channel and an existing channel, allowing them to grant themselves per
- 8.8 High severity
matrix-appservice-irc: Improper Neutralization of Special Elements in Output Used by a Downstream Component
matrix-appservice-irc is a Node.js IRC bridge for Matrix. The vulnerability in node-irc allows an attacker to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message. The vulnerability has been patched in matr