CVE-2023-38700

Name of the Vulnerable Software and Affected Versions matrix-appservice-irc versions prior to 1.0.1

Description The issue allows an attacker to craft an event that leaks part of a targeted message event from another bridged room, requiring knowledge of an event ID to target.

Recommendations For versions prior to 1.0.1, upgrade to version 1.0.1. As a temporary workaround, consider setting the matrixHandler.eventCacheSize config value to 0, although this may impact performance.