CVE-2024-42369: matrix-js-sdk will freeze when a user sets a room with itself as a its predecessor
A malicious homeserver can craft a room or room structure such that the predecessors form a cycle. The matrix-js-sdk’s getRoomUpgradeHistory
function will infinitely recurse in this case, causing the code to hang. This method is public but also called by the ’leaveRoomChain()’ method, so leaving a room will also trigger the bug.
References
Detect and mitigate CVE-2024-42369 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →