CVE-2024-52594: Gomatrixserverlib Server-Side Request Forgery (SSRF) on redirects and federation
(updated )
Gomatrixserverlib is vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions.
References
- github.com/advisories/GHSA-4ff6-858j-r822
- github.com/matrix-org/gomatrixserverlib
- github.com/matrix-org/gomatrixserverlib/commit/c4f1e01eab0dd435709ad15463ed38a079ad6128
- github.com/matrix-org/gomatrixserverlib/security/advisories/GHSA-4ff6-858j-r822
- nvd.nist.gov/vuln/detail/CVE-2024-52594
- pkg.go.dev/vuln/GO-2025-3396
Code Behaviors & Features
Detect and mitigate CVE-2024-52594 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →