matrix-synapse vulnerabilities (openSUSE)
36 vulnerabilities.
-
matrix-synapseopenSUSE python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees 6.9 Medium -
matrix-synapseopenSUSE Synapse pagination denial of service 5.1 Medium -
matrix-synapseopenSUSE Synapse CPU starvation (Denial of Service) 6.8 Medium -
matrix-synapseopenSUSE ESS Community Helm Chart has a weak server key generation method 9.2 Critical -
matrix-synapseopenSUSE Synapse: Invalid device keys degrade federation functionality 5.3 Medium -
matrix-synapseopenSUSE PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client 8.8 High -
matrix-synapseopenSUSE The Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution... 7.1 High -
matrix-synapseopenSUSE Synapse vulnerable to federation denial of service via malformed events 7.1 High -
matrix-synapseopenSUSE Synapse unauthenticated writes to the media repository allow planting of problematic content 5.3 Medium -
matrix-synapseopenSUSE Synapse denial of service through media disk space consumption 7.5 High -
matrix-synapseopenSUSE Synapse allows unsupported content types to lead to memory exhaustion 8.2 High -
matrix-synapseopenSUSE Synapse allows a a malformed invite to break the invitee's `/sync` 8.7 High -
matrix-synapseopenSUSE Synapse Matrix has a partial room state leak via Sliding Sync 4.3 Medium -
matrix-synapseopenSUSE Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders 8.2 High -
matrix-synapseopenSUSE twisted.web has disordered HTTP pipeline response 8.3 High -
matrix-synapseopenSUSE Synapse's V2 state resolution weakness allows DoS from remote room members 6.5 Medium -
matrix-synapseopenSUSE Synapse vulnerable to leak of remote user device information 5.3 Medium -
matrix-synapseopenSUSE matrix-synapse vulnerable to denial of service due to malicious server ACL events 4.9 Medium -
matrix-synapseopenSUSE Improper validation of receipts allows forged read receipts in matrix synapse 3.1 Low -
matrix-synapseopenSUSE Temporary storage of plaintext passwords during password changes in matrix synapse 3.7 Low -
matrix-synapseopenSUSE Duplicate Advisory: Bundled libwebp in Pillow vulnerable 8.8 High -
matrix-synapseopenSUSE URL deny list bypass via oEmbed and image URLs when generating previews in Synapse 3.5 Low -
matrix-synapseopenSUSE Improper checks for deactivated users during login in synapse 5.4 Medium -
matrix-synapseopenSUSE URL previews can crash Synapse media repositories or Synapse monoliths 6.5 Medium -
matrix-synapseopenSUSE Path traversal in Matrix Synapse 7.5 High -
matrix-synapseopenSUSE Improper authorisation of /members discloses room membership to non-members 3.1 Low -
matrix-synapseopenSUSE Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner. 3.1 Low -
matrix-synapseopenSUSE Denial of service in Matrix Synapse 3.7 Low -
matrix-synapseopenSUSE NULL pointer deref in signature_algorithms processing 5.9 Medium -
matrix-synapseopenSUSE Denial of service attack via incorrect parameters to federation APIs 6.5 Medium -
matrix-synapseopenSUSE EDIPARTYNAME NULL pointer dereference 5.9 Medium -
matrix-synapseopenSUSE Cross-site scripting (XSS) vulnerability in the fallback authentication endpoint 6.1 Medium -
matrix-synapseopenSUSE Improper Input Validation in Twisted 9.8 Critical -
matrix-synapseopenSUSE HTTP Request Smuggling in Twisted 9.8 Critical -
matrix-synapseopenSUSE Matrix Synapse Predictable Secret Key 7.5 High -
matrix-synapseopenSUSE Matrix Synapse Security Filtering Flaw 7.5 High