Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-91275
HistoryNov 25, 2021 - 12:00 a.m.

Synapse path traversal vulnerability

2021-11-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.001 Low

EPSS

Percentile

47.0%

Synapse is an application. for open federated instant messaging and VoIPSynapse. versions prior to Synapse 1.47.1 contain a path traversal vulnerability that could be exploited by an attacker to bypass the authentication process and download files from a remote server to an arbitrary directory.

CPENameOperatorVersion
synapse synapselt1.47.1