CVE-2023-42453 Improper validation of receipts allows forged read receipts in matrix synapse

🗓️ 26 Sep 2023 20:23:49Reported by GitHub_MType

Improper validation of receipts in Matrix Synapse allows forged read receipt

Reporter	Title	Published	Views	Family All 23
UbuntuCve	CVE-2023-42453	27 Sep 202300:00	–	ubuntucve
NVD	CVE-2023-42453	27 Sep 202315:19	–	nvd
OSV	CVE-2023-42453	27 Sep 202315:19	–	osv
OSV	matrix-synapse vulnerable to improper validation of receipts allows forged read receipts	26 Sep 202319:20	–	osv
OSV	PYSEC-2023-180	27 Sep 202315:19	–	osv
OSV	matrix-synapse-1.93.0-1.1 on GA media	15 Jun 202400:00	–	osv
Debian CVE	CVE-2023-42453	27 Sep 202315:19	–	debiancve
Github Security Blog	matrix-synapse vulnerable to improper validation of receipts allows forged read receipts	26 Sep 202319:20	–	github
Veracode	Improper Authorization	28 Sep 202307:14	–	veracode
AlpineLinux	CVE-2023-42453	27 Sep 202315:19	–	alpinelinux

[
  {
    "vendor": "matrix-org",
    "product": "synapse",
    "versions": [
      {
        "version": ">= 0.34.0, < 1.93.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/matrix-org/synapse/security/advisories/GHSA-7565-cq32-vx2x
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/2AFB2Y3S2VCPCN5P2XCZTG24MBMZ7DM4/
security	www.security.gentoo.org/glsa/202401-12
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/N6P4QULVUE254WI7XF2LWWOGHCYVFXFY/
github	www.github.com/matrix-org/synapse/pull/16327
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/65QPC55I4D27HIZP7H2NQ34EOXHPP4AO/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Sep 2023 20:49Current

4.7Medium risk

Vulners AI Score4.7

CVSS33.1

EPSS0.001

CWE-285