Matrix v3.17.0 Security Release: Fixes for SSRF, IDOR, CSV Injection, and Auth Issues

Vulnerability Overview In version , several security-related issues were addressed, primarily including: 1. Credential Access Control: Fixed credential access control issues and removed vulnerable S3 upload endpoints. 2. SSRF Bypass: Fixed SSRF bypass issues in HTTP requests and script extraction fields via DNS rebinding. 3. SSRF Security Dispatcher: Fixed DNS lookup handling issues in the SSRF security dispatcher. 4. SSRF Environment Variables: Fixed SSRF allowed host environment variable issues for self-hosted internal APIs. 5. API Token Hashing: Fixed API token hashing issues. 6. CSV Injection: Fixed formula injection issues in CSV exports. 7. IDOR: Fixed cross-type webhook recovery IDOR issues. 8. WhatsApp Status Forwarding: Fixed SSRF protection issues for WhatsApp status forwarding. 9. WhatsApp Preview: Fixed WhatsApp preview webhook authorization issues. 10. Google Sheets OAuth: Fixed Google Sheets OAuth callback authorization issues. 11. URL Generation: Fixed insecure upload URL generation issues. Impact Scope These vulnerabilities may affect users of version , particularly those involving credential access, SSRF, API tokens, CSV exports, IDOR, WhatsApp integration, Google Sheets integration, and upload URL generation functionalities. Remediation 1. Credential Access Control: Strengthened credential access control and removed vulnerable S3 upload endpoints. 2. SSRF Bypass: Improved DNS rebinding protection and enhanced security for HTTP requests and script extraction fields. 3. SSRF Security Dispatcher: Optimized DNS lookup handling to prevent SSRF attacks. 4. SSRF Environment Variables: Restricted SSRF allowed host environment variables to ensure the security of self-hosted internal APIs. 5. API Token Hashing: Improved API token hashing algorithms to prevent token leakage. 6. CSV Injection: Enhanced CSV export functionality to prevent formula injection attacks. 7. IDOR: Fixed IDOR issues in cross-type webhook recovery to ensure data access control. 8. WhatsApp Status Forwarding: Enhanced SSRF protection for WhatsApp status forwarding to prevent malicious requests. 9. WhatsApp Preview: Fixed WhatsApp preview webhook authorization issues to ensure the security of the authorization mechanism. 10. Google Sheets OAuth: Fixed Google Sheets OAuth callback authorization issues to ensure the security of the OAuth flow. 11. URL Generation: Improved upload URL generation logic to prevent the generation of insecure URLs. POC or Exploit Code No specific POC or exploit code was provided on the page.

Goal Reached Thanks to every supporter — we hit 100%!

Matrix v3.17.0 Security Release: Fixes for SSRF, IDOR, CSV Injection, and Auth Issues

More from this source