Skip to main content

Improper Enforcement of a Single, Unique Action

CVE-2025-54315

High
7.1/10

Summary

The Matrix specification prior to version 1.16 (i.e., with a room version before 12) lacks create event uniqueness.

  • HIGH
  • NETWORK
  • HIGH
  • CHANGED
  • NONE
  • LOW
  • NONE
  • LOW

CWE-837 - Improper Enforcement of a Single, Unique Action

The software requires that an actor should only be able to perform an action once, or to have only one unique action, but the software does not enforce or improperly enforces this restriction.

References

Advisory Timeline

  • Published