Medium severity5.4OSV Advisory· Published Nov 14, 2024· Updated Apr 15, 2026
CVE-2024-52505
CVE-2024-52505
Description
matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. The provisioning API of the matrix-appservice-irc bridge up to version 3.0.2 contains a vulnerability which can lead to arbitrary IRC command execution as the bridge IRC bot. The vulnerability has been patched in matrix-appservice-irc version 3.0.3.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
20.1.1, 0.10.1, 0.14.0-rc1, …+ 1 more
- (no CPE)range: 0.1.1, 0.10.1, 0.14.0-rc1, …
- (no CPE)range: <=3.0.2
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.