Matrix

Synapse

40 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.5

CVE-2021-39164

  • EPSS 0.5%
  • Veröffentlicht 31.08.2021 17:15:08
  • Zuletzt bearbeitet 21.11.2024 06:18:45

Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the membership (list of members, with their display names) of a room if they know the ID of the room. The vulne...

3.5

CVE-2021-39163

  • EPSS 0.27%
  • Veröffentlicht 31.08.2021 16:15:07
  • Zuletzt bearbeitet 21.11.2024 06:18:45

Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the name, avatar, topic and number of members of a room if they know the ID of the room. This vulnerability is ...

5.3

CVE-2021-29471

  • EPSS 0.61%
  • Veröffentlicht 11.05.2021 15:15:08
  • Zuletzt bearbeitet 21.11.2024 06:01:11

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.33.2 "Push rules" can specify conditions under which they will...

6.5

CVE-2021-21393

  • EPSS 0.55%
  • Veröffentlicht 12.04.2021 22:15:13
  • Zuletzt bearbeitet 21.11.2024 05:48:16

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on...

6.3

CVE-2021-21392

  • EPSS 0.2%
  • Veröffentlicht 12.04.2021 22:15:13
  • Zuletzt bearbeitet 21.11.2024 05:48:15

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to ...

6.5

CVE-2021-21394

  • EPSS 0.52%
  • Veröffentlicht 12.04.2021 21:15:14
  • Zuletzt bearbeitet 21.11.2024 05:48:16

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on...

6.1

CVE-2021-21333

  • EPSS 0.26%
  • Veröffentlicht 26.03.2021 20:15:11
  • Zuletzt bearbeitet 21.11.2024 05:48:02

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the notification emails sent for notifications for misse...

8.2

CVE-2021-21332

  • EPSS 0.51%
  • Veröffentlicht 26.03.2021 20:15:11
  • Zuletzt bearbeitet 21.11.2024 05:48:02

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the password reset endpoint served via Synapse was vulne...

6.1

CVE-2021-21273

  • EPSS 0.39%
  • Veröffentlicht 26.02.2021 18:15:12
  • Zuletzt bearbeitet 21.11.2024 05:47:54

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, requests to user provided domains were not restricted to...

6.5

CVE-2021-21274

  • EPSS 0.58%
  • Veröffentlicht 26.02.2021 18:15:12
  • Zuletzt bearbeitet 21.11.2024 05:47:54

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, a malicious homeserver could redirect requests to their ...