matrix-org synapse vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 202111
3. 20225
4. 20237

Newest CVEs

• CVE-2023-43796

  Synapse vulnerable to leak of remote user device information

  matrix-org · synapse

  Medium5.3
• CVE-2023-45129

  matrix-synapse vulnerable to denial of service due to malicious server ACL events

  matrix-org · synapse

  Medium4.9
• CVE-2023-41335

  Temporary storage of plaintext passwords during password changes in matrix synapse

  matrix-org · synapse

  Low3.7
• CVE-2023-42453

  Improper validation of receipts allows forged read receipts in matrix synapse

  matrix-org · synapse

  Low3.1
• CVE-2023-32683

  URL deny list bypass via oEmbed and image URLs when generating previews in Synapse

  matrix-org · synapse

  Low3.5
• CVE-2023-32682

  Improper checks for deactivated users during login in synapse

  matrix-org · synapse

  Medium5.4
• CVE-2022-39374

  Synapse Denial of service due to incorrect application of event authorization rules during state resolution

  matrix-org · synapse

  Medium6.5
• CVE-2022-39335

  Synapse does not apply enough checks to servers requesting auth events of events in a room

  matrix-org · synapse

  Medium5.0
• CVE-2023-32323

  Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites

  matrix-org · synapse

  Medium5.0
• CVE-2022-41952

  Uncontrolled Resource Consumption in Matrix Synapse

  matrix-org · synapse

  Medium6.5