CVE-2023-38690: matrix-appservice-irc IRC command injection via admin commands containing newlines
First published: Fri Aug 04 2023(Updated: )
### Impact It is possible to craft a command with newlines which would not be properly parsed. This would mean you could pass a string of commands as a channel name, which would then be run by the IRC bridge bot. ### Patches Versions 1.0.1 and above are patched. ### Workarounds There are no robust workarounds to the bug. You can disable dynamic channels in the config to disable the most common execution method but others may exist. It is highly recommended to upgrade the bridge. ### Credits Discovered and reported by [Val Lorentz](https://valentin-lorentz.fr/). ### For more information If you have any questions or comments about this advisory email us at [security@matrix.org](mailto:security@matrix.org).
Credit: security-advisories@github.com security-advisories@github.com security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Matrix Matrix Irc Bridge | <1.0.1 | |
| npm/matrix-appservice-irc | <=1.0.0 | 1.0.1 |
Remedy
https://github.com/matrix-org/matrix-appservice-irc/commit/0afb064635d37e039067b5b3d6423448b93026d3
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/matrix-org/matrix-appservice-irc/releases/tag/1.0.1
- https://github.com/matrix-org/matrix-appservice-irc/security/advisories/GHSA-3pmj-jqqp-2mj3
- https://github.com/matrix-org/matrix-appservice-irc/commit/0afb064635d37e039067b5b3d6423448b93026d3
- https://nvd.nist.gov/vuln/detail/CVE-2023-38690
- https://github.com/advisories/GHSA-3pmj-jqqp-2mj3 (Advisory)
Frequently Asked Questions
What is the severity of CVE-2023-38690?
The severity of CVE-2023-38690 is critical with a CVSS score of 9.8.
How can I exploit CVE-2023-38690?
To exploit CVE-2023-38690, you would need to craft a command with newlines to be run by the IRC bridge bot.
Is CVE-2023-38690 patched?
Yes, CVE-2023-38690 is patched in versions 1.0.1 and above.
Are there any workarounds for CVE-2023-38690?
No, there are no known workarounds for CVE-2023-38690.
Where can I find more information about CVE-2023-38690?
You can find more information about CVE-2023-38690 on the GitHub security advisories and release pages.
- collector/nvd-latest
- collector/nvd-api
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/weakness
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-3pmj-jqqp-2mj3
- alias/CVE-2023-38690
- agent/software-canonical-lookup
- agent/remedy
- agent/references
- agent/description
- agent/author
- collector/nvd-cve
- source/NVD
- collector/github-advisory
- agent/severity
- agent/title
- agent/first-publish-date
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- vendor/matrix
- canonical/matrix matrix irc bridge
- package-manager/npm