CVE-2024-32000

matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. matrix-appservice-irc before version 2.0.0 can be exploited to leak the truncated body of a message if a malicious user sends a Matrix reply to an event ID they don't have access to. As a precondition to the attack, the malicious user needs to know the event ID of the message they want to leak, as well as to be joined to both the Matrix room and the IRC channel it is bridged to. The message reply containing the leaked message content is visible to IRC channel members when this happens. matrix-appservice-irc 2.0.0 checks whether the user has permission to view an event before constructing a reply. Administrators should upgrade to this version. It's possible to limit the amount of information leaked by setting a reply template that doesn't contain the original message. See these lines `601-604` in the configuration file linked.

• CWE-280
• CWE-755

• https://github.com/matrix-org/matrix-appservice-irc/blob/d5d67d1d3ea3f0f6962a0af2cc57b56af3ad2129/config.sample.yaml#L601-L604
• https://github.com/matrix-org/matrix-appservice-irc/pull/1799
• https://github.com/matrix-org/matrix-appservice-irc/security/advisories/GHSA-wm4w-7h2q-3pf7
• https://github.com/matrix-org/matrix-appservice-irc/blob/d5d67d1d3ea3f0f6962a0af2cc57b56af3ad2129/config.sample.yaml#L601-L604
• https://github.com/matrix-org/matrix-appservice-irc/pull/1799
• https://github.com/matrix-org/matrix-appservice-irc/security/advisories/GHSA-wm4w-7h2q-3pf7

Published

Apr 12, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-31995`@digitalbazaar/zcap` provides JavaScript reference implemen…4.3
• CVE-2024-31996XWiki Platform is a generic wiki platform. Starting in versi…9.8
• CVE-2024-31997XWiki Platform is a generic wiki platform. Prior to versions…8.8
• CVE-2024-31998Combodo iTop is a simple, web based IT Service Management to…8.8
• CVE-2024-31999@festify/secure-session creates a secure stateless cookie se…7.4
• CVE-2024-3200The wpForo Forum plugin for WordPress is vulnerable to SQL I…6.5
• CVE-2024-32001SpiceDB is a graph database purpose-built for storing and ev…4.3
• CVE-2024-32002Git is a revision control system. Prior to versions 2.45.1, …9
• CVE-2024-32003wn-dusk-plugin (Dusk plugin) is a plugin which integrates La…8.8
• CVE-2024-32004Git is a revision control system. Prior to versions 2.45.1, …7.8
• CVE-2024-32005NiceGUI is an easy-to-use, Python-based UI framework. A loca…8.2
• CVE-2024-32006A vulnerability has been identified in SINEMA Remote Connect…6.5