Skip to content
OpenAdvisories

Package · Go

github.com/turt2live/matrix-media-repo

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.1
    CVE-2023-41318

    Unsafe media served inline on download endpoints in matrix-media-repo

    matrix-media-repo is a highly customizable multi-domain media repository for the Matrix chat ecosystem. In affected versions an attacker could upload a malicious piece of media to the media repo, which would then be served with `Content-Disposition: inline` u…

    turt2live matrix-media-repo github.com/turt2live/matrix-media-repo Go