Skip to content
OpenAdvisories

Vendor

turt2live

2 known vulnerabilities.

Products

matrix-media-repo 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.1
    CVE-2023-41318

    Unsafe media served inline on download endpoints in matrix-media-repo

    matrix-media-repo is a highly customizable multi-domain media repository for the Matrix chat ecosystem. In affected versions an attacker could upload a malicious piece of media to the media repo, which would then be served with `Content-Disposition: inline` u…

    turt2live matrix-media-repo github.com/turt2live/matrix-media-repo Go
  • Medium 5.7
    CVE-2021-29453

    Denial of service through memory exhaustion

    matrix-media-repo is an open-source multi-domain media repository for Matrix. Versions 1.2.6 and earlier of matrix-media-repo do not properly handle malicious images which are crafted to be small in file size, but large in complexity. A malicious user could u…

    turt2live matrix-media-repo