low2.6
CVE-2021-21320
User content sandbox can be confused into opening arbitrary documents
Impact
### Impact The user content sandbox can be abused to trick users into opening unexpected documents after several user interactions. The content can be opened with a `blob` origin from the Matrix client, so it is possible for a malicious document to access user messages and secrets. ### Patches This has been fixed by https://github.com/matrix-org/matrix-react-sdk/pull/5657, which is included in 3.15.0. ### Workarounds There are no known workarounds.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | matrix-react-sdk | < 3.15.0 | 3.15.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Matrix-React-Sdk Project | Matrix-React-Sdk | before 3.15.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/matrix-org/matrix-react-sdk/commit/b386f0c73b95ecbb6ea7f8f79c6ff5171a8dedd1
- https://github.com/matrix-org/matrix-react-sdk/pull/5657
- https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-52mq-6jcv-j79x
- https://www.npmjs.com/package/matrix-react-sdk
- https://github.com/advisories/GHSA-52mq-6jcv-j79x
- https://nvd.nist.gov/vuln/detail/CVE-2021-21320