漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
matrix-js-sdk has insufficient validation when considering a room to be upgraded by another
Vulnerability Description
Matrix JavaScript SDK is a Matrix Client-Server SDK for JavaScript and TypeScript. matrix-js-sdk before 38.2.0 has insufficient validation of room predecessor links in MatrixClient::getJoinedRooms, allowing a remote attacker to attempt to replace a tombstoned room with an unrelated attacker-supplied room. The issue has been patched and users should upgrade to 38.2.0. A workaround is to avoid using MatrixClient::getJoinedRooms in favor of getRooms() and filtering upgraded rooms separately.
CVSS Information
N/A
Vulnerability Type
对数据真实性的验证不充分
Vulnerability Title
matrix-js-sdk 数据伪造问题漏洞
Vulnerability Description
matrix-js-sdk是Matrix开源的一个应用组件。 matrix-js-sdk 38.2.0之前版本存在数据伪造问题漏洞，该漏洞源于MatrixClient::getJoinedRooms中房间前驱链接验证不足，可能导致攻击者用无关房间替换已废弃房间。
CVSS Information
N/A
Vulnerability Type
N/A