{"answers":{"affected":"2 open source packages ship an affected version, including matrix-appservice-irc.","exploited":"There is no known exploitation of CVE-2024-32000 in the wild and no public exploit code.","fix":"Upgrade matrix-appservice-irc to 2.0.0 or later.","what":"CVE-2024-32000 is a medium-severity vulnerability in matrix-org matrix-appservice-irc, published on 12 Apr 2024."},"fix_prompt":"Check this codebase for CVE-2024-32000 and fix it if it is affected.\n\nWhat it is: CVE-2024-32000 is a medium-severity vulnerability in matrix-org matrix-appservice-irc, published on 12 Apr 2024. \nExploitation: There is no known exploitation of CVE-2024-32000 in the wild and no public exploit code.\n\nAffected packages and fixed versions:\n- matrix-appservice-irc (npm): affected all versions; fixed in 2.0.0\n- matrix-appservice-irc (npm): affected all versions; fixed in 2.0.0\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2024-32000/ (Markdown: https://insights.sbomify.com/CVE-2024-32000/index.md)","id":"CVE-2024-32000","markdown":"https://insights.sbomify.com/CVE-2024-32000/index.md","name":"CVE-2024-32000","record":{"aliases":["GHSA-wm4w-7h2q-3pf7"],"analysis":null,"analysis_generated_by":null,"assigner":"GitHub_M","cpe":[],"cvss":{"score":4.3,"severity":"medium","source":"cna","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"cwes":[{"id":"CWE-755","name":"Improper Handling of Exceptional Conditions"},{"id":"CWE-280","name":"Improper Handling of Insufficient Permissions or Privileges"}],"description":"matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. matrix-appservice-irc before version 2.0.0 can be exploited to leak the truncated body of a message if a malicious user sends a Matrix reply to an event ID they don't have access to. As a precondition to the attack, the malicious user needs to know the event ID of the message they want to leak, as well as to be joined to both the Matrix room and the IRC channel it is bridged to. The message reply containing the leaked message content is visible to IRC channel members when this happens. matrix-appservice-irc 2.0.0 checks whether the user has permission to view an event before constructing a reply. Administrators should upgrade to this version. It's possible to limit the amount of information leaked by setting a reply template that doesn't contain the original message. See these lines `601-604` in the configuration file linked.","ecosystems":["npm"],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"Truncated content of messages can be leaked from matrix-appservice-irc","id":"CVE-2024-32000","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":"npm","product":null,"products":[],"type":null,"year":"2024"},"n_packages":2,"n_references":3,"next":{"headline":"SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used","id":"CVE-2024-32001"},"packages":[{"ecosystem":"npm","fixed":["2.0.0"],"introduced":["0"],"last_affected":[],"package":"matrix-appservice-irc","purl":null,"source":"GHSA-wm4w-7h2q-3pf7"},{"ecosystem":"npm","fixed":["2.0.0"],"introduced":["0"],"last_affected":[],"package":"matrix-appservice-irc","purl":"pkg:npm/matrix-appservice-irc","source":"GHSA-wm4w-7h2q-3pf7"}],"prev":{"headline":"@fastify/secure-session: Reuse of destroyed secure session cookie","id":"CVE-2024-31999"},"products":["matrix-appservice-irc"],"published":"2024-04-12","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"GitHub Advisory Database","prefix":"GHSA"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2024-08-02","vendors":["matrix-org"]},"summary":null,"url":"https://insights.sbomify.com/CVE-2024-32000/"}