Search CVE reports
11 – 20 of 44 results
Some fixes available 1 of 15
Synapse is an open-source Matrix homeserver. A remote Matrix user with malicious intent, sharing a room with Synapse instances before 1.105.1, can dispatch specially crafted events to exploit a weakness in the V2 state resolution...
2 affected packages
synapse, matrix-synapse
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| synapse | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| matrix-synapse | — | Ignored | Fixed | Ignored | Ignored |
Some fixes available 3 of 5
Synapse is an open-source Matrix homeserver Prior to versions 1.95.1 and 1.96.0rc1, cached device information of remote users can be queried from Synapse. This can be used to enumerate the remote users known to a homeserver....
1 affected package
matrix-synapse
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| matrix-synapse | — | Not affected | Fixed | Fixed | Fixed |
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent...
1 affected package
matrix-synapse
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| matrix-synapse | — | Not affected | Ignored | Ignored | Ignored |
Some fixes available 1 of 5
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Users were able to forge read receipts for any event (if they knew the room ID and event ID). Note that the users were not able to...
1 affected package
matrix-synapse
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| matrix-synapse | — | Not affected | Fixed | Ignored | Ignored |
Some fixes available 1 of 3
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. When users update their passwords, the new credentials may be briefly held in the server database. While this doesn't grant the...
1 affected package
matrix-synapse
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| matrix-synapse | — | Not affected | Fixed | Not affected | Not affected |
Some fixes available 3 of 6
Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. A discovered oEmbed or image URL can bypass the `url_preview_url_blacklist` setting potentially allowing server side request forgery or...
1 affected package
matrix-synapse
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| matrix-synapse | — | Not affected | Fixed | Fixed | Fixed |
Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. In affected versions it may be possible for a deactivated user to login when using uncommon configurations. This only applies if any of the...
1 affected package
matrix-synapse
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| matrix-synapse | — | Not affected | Ignored | Ignored | Ignored |
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. A malicious user on a Synapse homeserver X with permission to create certain state events can disable outbound federation from X to...
1 affected package
matrix-synapse
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| matrix-synapse | — | Not affected | Ignored | Ignored | Ignored |
Some fixes available 2 of 5
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. If Synapse and a malicious homeserver are both joined to the same room, the malicious homeserver can trick Synapse into accepting...
1 affected package
matrix-synapse
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| matrix-synapse | — | Not affected | Fixed | Fixed | Not affected |
Some fixes available 1 of 6
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. The Matrix Federation API allows remote homeservers to request the authorization events in a room. This is necessary so that...
1 affected package
matrix-synapse
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| matrix-synapse | — | Not affected | Fixed | Ignored | Ignored |