How many matrix-org matrix-spec-proposals CVEs are in CISA KEV?

None of matrix-org matrix-spec-proposals's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for matrix-org matrix-spec-proposals vulnerabilities?

Yes — 1 of matrix-org matrix-spec-proposals's CVEs have a known public exploit.

What are the most common weakness types in matrix-org matrix-spec-proposals CVEs?

matrix-org matrix-spec-proposals's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-20 (Improper Input Validation), CWE-306 (Missing Authentication for Critical Function), CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere).

What is the average severity of matrix-org matrix-spec-proposals CVEs?

The average CVSS base score across matrix-org matrix-spec-proposals's scored CVEs is 6.3.

RadicalNotion.AI

Log in Create an account

matrix-org

8 CVEs

matrix-org matrix-spec-proposals Vulnerabilities

Name: matrix-org matrix-spec-proposals vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for matrix-spec-proposals by matrix-org.

8

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

6.3

Avg CVSS

2022–2025

Last updated January 16, 2025

Overview

matrix-org matrix-spec-proposals has 8 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.3.

Severity and exploitation

How the CVSS severity of matrix-org matrix-spec-proposals's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High3

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of matrix-org matrix-spec-proposals's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of matrix-org matrix-spec-proposals's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every matrix-org matrix-spec-proposals version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for matrix-org matrix-spec-proposals; the CVEs below apply to the product without a version pin.

8 CVEs

Sort

matrix-media-repo (MMR) allows unauthenticated writes to the media repository, which may allow planting of problematic content
CVE-2024-36402
Public exploit
Patch
CWE-287
Medium · CVSS 5.3
EPSS 0.5% (45th pct)2025-01-16
Synapse unauthenticated writes to the media repository allow planting of problematic content
CVE-2024-37303
Patch
CWE-306
Medium · CVSS 6.9
EPSS 0.4% (36th pct)2024-12-03
Synapse Matrix has a partial room state leak via Sliding Sync
CVE-2024-53867
Patch
CWE-497
Medium · CVSS 4.3
EPSS 0.4% (37th pct)2024-12-03
Matrix JavaScript SDK's key history sharing could share keys to malicious devices
CVE-2024-47080
Patch
CWE-287
High · CVSS 8.7
EPSS 0.7% (51th pct)2024-10-15
matrix-js-sdk vulnerable to invisible eavesdropping in group calls
CVE-2023-29529
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.5% (44th pct)2023-04-14
matrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessions
CVE-2022-39246
Patch
CWE-287
High · CVSS 7.5
EPSS 0.9% (58th pct)2022-09-28
matrix-js-sdk subject to impersonated messages due to permissive key forwarding
CVE-2022-39249
Patch
CWE-287
High · CVSS 7.5
EPSS 1.3% (69th pct)2022-09-28
Improper beacon events in matrix-js-sdk can result in availability issues
CVE-2022-39236
Patch
CWE-20
Medium · CVSS 5.3
EPSS 1.4% (71th pct)2022-09-28

Common weakness types

The CWE weakness categories most often found in matrix-org matrix-spec-proposals CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many matrix-org matrix-spec-proposals CVEs were published each year.

2022

3

2023

1

2024

3

2025

1

Other matrix-org products

Browse vulnerabilities for other products by matrix-org.

synapse40 CVEs matrix-synapse31 CVEs matrix-js-sdk13 CVEs javascript sdk10 CVEs matrix-appservice-irc10 CVEs matrix-rust-sdk10 CVEs matrix-react-sdk8 CVEs matrix irc bridge7 CVEs

All matrix-org vulnerabilities

Frequently asked questions

Common questions about matrix-org matrix-spec-proposals vulnerabilities.

How many CVEs does matrix-org matrix-spec-proposals have?: matrix-org matrix-spec-proposals has 8 published CVE records since 2022.
How many matrix-org matrix-spec-proposals CVEs are in CISA KEV?: None of matrix-org matrix-spec-proposals's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for matrix-org matrix-spec-proposals vulnerabilities?: Yes — 1 of matrix-org matrix-spec-proposals's CVEs have a known public exploit.
What are the most common weakness types in matrix-org matrix-spec-proposals CVEs?: matrix-org matrix-spec-proposals's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-20 (Improper Input Validation), CWE-306 (Missing Authentication for Critical Function), CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere).
What is the average severity of matrix-org matrix-spec-proposals CVEs?: The average CVSS base score across matrix-org matrix-spec-proposals's scored CVEs is 6.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track matrix-org matrix-spec-proposals vulnerabilities

Get an alert for each new matrix-org matrix-spec-proposals CVE, with AI-written analysis and remediation steps.

Create an account See pricing