id: GO-2025-3399
modules:
    - module: github.com/t2bot/matrix-media-repo
      versions:
        - fixed: 1.3.8
      vulnerable_at: 1.3.7
summary: |-
    Matrix Media Repo (MMR) allows Server-Side Request Forgery (SSRF) on redirects
    and federation in github.com/t2bot/matrix-media-repo
cves:
    - CVE-2024-52602
ghsas:
    - GHSA-r6jg-jfv6-2fjv
references:
    - advisory: https://github.com/t2bot/matrix-media-repo/security/advisories/GHSA-r6jg-jfv6-2fjv
    - web: https://github.com/t2bot/matrix-media-repo/releases/tag/v1.3.8
source:
    id: GHSA-r6jg-jfv6-2fjv
    created: 2025-01-16T21:30:51.885337875Z
review_status: UNREVIEWED