Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.6

matrix-appservice-irc can be tricked into running unauthorized database commands

CVE-2022-3971 · published 3 years ago
Summary

Versions of matrix-appservice-irc up to 0.35.1 let a specially crafted roomIds value cause a database command injection. This could let an attacker change or view data stored in the PostgreSQL database. Updating the software to version 0.36.0 resolves the issue.

What to do
  • Update halfshot matrix-appservice-irc to version 0.36.0.
Affected software
Ecosystem VendorProductAffected versions
npm halfshot matrix-appservice-irc < 0.36.0
Fix: upgrade to 0.36.0
– matrix matrix_irc_bridge <= 0.36.0
cpe:2.3:a:matrix:matrix_irc_bridge:*:*:*:*:*:node.js:*:*
Original advisory text
matrix-appservice-irc PgDataStore.ts sql injection
A vulnerability was found in matrix-appservice-irc up to 0.35.1. It has been declared as critical. This vulnerability affects unknown code of the file src/datastore/postgres/PgDataStore.ts. The manipulation of the argument roomIds leads to sql injection. Upgrading to version 0.36.0 is able to address this issue. The name of the patch is 179313a37f06b298150edba3e2b0e5a73c1415e7. It is recommended to upgrade the affected component. VDB-213550 is the identifier assigned to this vulnerability.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
4.6 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-89SQL Injection
CWE-707Improper Neutralization
Timeline
Published13 Nov 2022
Updated4 Nov 2026
First seen6 Mar 2026
Sources
GHSA-ffwf-47x2-jpr8 · GHSA
CVE-2022-3971 · NVD
CVE-2022-3971 · OSV
Track software like this
Free during beta