Lucene search
China National Vulnerability DatabaseCNVD-2021-70122HistorySep 02, 2021 - 12:00 a.m.
Matrix Information Disclosure Vulnerability (CNVD-2021-70122)
2021-09-0200:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
matrix
information disclosure
vulnerability
1.41.0
instant messaging
voip
attackers
access
room names
avatars
topics
member counts
EPSS
0.001
Percentile
49.7%
Matrix is an ambitious new ecosystem for open federated instant messaging and VoIP. Matrix 1.41.0 and earlier versions have an information disclosure vulnerability that could be exploited by attackers to access room names, avatars, topics and member counts.
Related
github
github
veracode
veracode
Privilege Escalation
2021-09-01 03:33:36
osv
osv
Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
2021-09-01 18:25:44
CVE-2021-39163
2021-08-31 16:15:07
PYSEC-2021-424
2021-08-31 16:15:00
prion
prion
Design/Logic Flaw
2021-08-31 16:15:00
ubuntucve
ubuntucve
CVE-2021-39163
2021-08-31 00:00:00
alpinelinux
alpinelinux
CVE-2021-39163
2021-08-31 16:15:07
cvelist
cvelist
nvd
nvd
CVE-2021-39163
2021-08-31 16:15:07
cve
cve
CVE-2021-39163
2021-08-31 16:15:07
debiancve
debiancve
CVE-2021-39163
2021-08-31 16:15:07
fedora
fedora
[SECURITY] Fedora 34 Update: matrix-synapse-1.41.1-1.fc34
2021-09-08 15:07:22
[SECURITY] Fedora 35 Update: matrix-synapse-1.41.1-1.fc35
2021-09-24 20:41:56
nessus
nessus
openvas
openvas
Fedora: Security Advisory for matrix-synapse (FEDORA-2021-2e8ed15b14)
2021-09-09 00:00:00
Fedora: Security Advisory for matrix-synapse (FEDORA-2021-f12fdca1bf)
2021-10-02 00:00:00
freebsd
freebsd
py-matrix-synapse -- several vulnerabilities
2021-08-31 00:00:00