matrix-synapse vulnerabilities (Ubuntu)
43 vulnerabilities.
-
matrix-synapseUbuntu Synapse pagination denial of service 5.1 Medium -
matrix-synapseUbuntu Synapse CPU starvation (Denial of Service) 6.8 Medium -
matrix-synapseUbuntu Synapse: Invalid device keys degrade federation functionality 5.3 Medium -
matrix-synapseUbuntu Synapse vulnerable to federation denial of service via malformed events 7.1 High -
matrix-synapseUbuntu Synapse unauthenticated writes to the media repository allow planting of problematic content 5.3 Medium -
matrix-synapseUbuntu Synapse denial of service through media disk space consumption 7.5 High -
matrix-synapseUbuntu Synapse allows unsupported content types to lead to memory exhaustion 8.2 High -
matrix-synapseUbuntu Synapse allows a a malformed invite to break the invitee's `/sync` 8.7 High -
matrix-synapseUbuntu Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders 8.2 High -
matrix-synapseUbuntu Synapse's V2 state resolution weakness allows DoS from remote room members 6.5 Medium -
matrix-synapseUbuntu Synapse vulnerable to leak of remote user device information 5.3 Medium -
matrix-synapseUbuntu matrix-synapse vulnerable to denial of service due to malicious server ACL events 4.9 Medium -
matrix-synapseUbuntu Improper validation of receipts allows forged read receipts in matrix synapse 3.1 Low -
matrix-synapseUbuntu Temporary storage of plaintext passwords during password changes in matrix synapse 3.7 Low -
matrix-synapseUbuntu URL deny list bypass via oEmbed and image URLs when generating previews in Synapse 3.5 Low -
matrix-synapseUbuntu Improper checks for deactivated users during login in synapse 5.4 Medium -
matrix-synapseUbuntu Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites 5.0 Medium -
matrix-synapseUbuntu Synapse Denial of service due to incorrect application of event authorization rules during state resolution 6.5 Medium -
matrix-synapseUbuntu Synapse does not apply enough checks to servers requesting auth events of events in a room 5.0 Medium -
matrix-synapseUbuntu Synapse vulnerable to denial of service (DoS) due to incorrect application of event authorization rules 6.4 Medium -
matrix-synapseUbuntu URL previews can crash Synapse media repositories or Synapse monoliths 6.5 Medium -
matrix-synapseUbuntu Uncontrolled Resource Consumption in Matrix Synapse 6.5 Medium -
matrix-synapseUbuntu Path traversal in Matrix Synapse 7.5 High -
matrix-synapseUbuntu Improper authorisation of /members discloses room membership to non-members 3.1 Low -
matrix-synapseUbuntu Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner. 3.1 Low -
matrix-synapseUbuntu Denial of service in Matrix Synapse 3.7 Low -
matrix-synapseUbuntu Open redirect via transitional IPv6 addresses on dual-stack networks 6.3 Medium -
matrix-synapseUbuntu Denial of service (via resource exhaustion) due to improper input validation on groups/communities endpoints 5.3 Medium -
matrix-synapseUbuntu Denial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints 5.3 Medium -
matrix-synapseUbuntu HTML injection in email and account expiry notifications 6.1 Medium -
matrix-synapseUbuntu Cross-site scripting (XSS) vulnerability in the password reset endpoint 6.9 Medium -
matrix-synapseUbuntu Open redirects on some federation and push requests 3.1 Low -
matrix-synapseUbuntu Denial of service attack via .well-known lookups 4.3 Medium -
matrix-synapseUbuntu Denial of service attack via incorrect parameters to federation APIs 6.5 Medium -
matrix-synapseUbuntu Denial of service attack due to invalid JSON 7.5 High -
matrix-synapseUbuntu Cross-site scripting (XSS) vulnerability in the fallback authentication endpoint 6.1 Medium -
matrix-synapseUbuntu Improper Verification of Cryptographic Signature in matrix-synapse 9.8 Critical -
matrix-synapseUbuntu matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG 7.5 High -
matrix-synapseUbuntu Matrix Synapse Predictable Secret Key 7.5 High -
matrix-synapseUbuntu Matrix Synapse Improper Signature Validation 8.8 High -
matrix-synapseUbuntu Matrix Synapse Authorization Error 7.5 High -
matrix-synapseUbuntu Matrix Synapse Security Filtering Flaw 7.5 High -
matrix-synapseUbuntu Matrix Synapse DoS 7.5 High