Matrix

Synapse

40 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.5

CVE-2021-39164

  • EPSS 0.5%
  • Published 31.08.2021 17:15:08
  • Last modified 21.11.2024 06:18:45

Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the membership (list of members, with their display names) of a room if they know the ID of the room. The vulne...

3.5

CVE-2021-39163

  • EPSS 0.27%
  • Published 31.08.2021 16:15:07
  • Last modified 21.11.2024 06:18:45

Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the name, avatar, topic and number of members of a room if they know the ID of the room. This vulnerability is ...

5.3

CVE-2021-29471

  • EPSS 0.61%
  • Published 11.05.2021 15:15:08
  • Last modified 21.11.2024 06:01:11

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.33.2 "Push rules" can specify conditions under which they will...

6.5

CVE-2021-21393

  • EPSS 0.55%
  • Published 12.04.2021 22:15:13
  • Last modified 21.11.2024 05:48:16

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on...

6.3

CVE-2021-21392

  • EPSS 0.2%
  • Published 12.04.2021 22:15:13
  • Last modified 21.11.2024 05:48:15

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to ...

6.5

CVE-2021-21394

  • EPSS 0.52%
  • Published 12.04.2021 21:15:14
  • Last modified 21.11.2024 05:48:16

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on...

6.1

CVE-2021-21333

  • EPSS 0.26%
  • Published 26.03.2021 20:15:11
  • Last modified 21.11.2024 05:48:02

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the notification emails sent for notifications for misse...

8.2

CVE-2021-21332

  • EPSS 0.51%
  • Published 26.03.2021 20:15:11
  • Last modified 21.11.2024 05:48:02

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the password reset endpoint served via Synapse was vulne...

6.1

CVE-2021-21273

  • EPSS 0.39%
  • Published 26.02.2021 18:15:12
  • Last modified 21.11.2024 05:47:54

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, requests to user provided domains were not restricted to...

6.5

CVE-2021-21274

  • EPSS 0.58%
  • Published 26.02.2021 18:15:12
  • Last modified 21.11.2024 05:47:54

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, a malicious homeserver could redirect requests to their ...