EUVD-2022-0153

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Synapse before 1.61.1 can crash from URL preview recursion. Upgrade or disable URL previews.

Reporter	Title	Published	Views	Family All 30
FreeBSD	py-matrix-synapse -- unbounded recursion in urlpreview	28 Jun 202200:00	–	freebsd
AlpineLinux	CVE-2022-31052	28 Jun 202217:10	–	alpinelinux
Circl	CVE-2022-31052	28 Jun 202220:36	–	circl
CNNVD	Matrix Synapse 安全漏洞	28 Jun 202200:00	–	cnnvd
CNVD	Matrix Synapse Denial of Service Vulnerability (CNVD-2022-60674)	30 Jun 202200:00	–	cnvd
CVE	CVE-2022-31052	28 Jun 202217:10	–	cve
Cvelist	CVE-2022-31052 URL previews can crash Synapse media repositories or Synapse monoliths	28 Jun 202217:10	–	cvelist
Debian CVE	CVE-2022-31052	28 Jun 202217:10	–	debiancve
Fedora	[SECURITY] Fedora 35 Update: matrix-synapse-1.61.1-1.fc35	8 Jul 202201:37	–	fedora
Fedora	[SECURITY] Fedora 36 Update: matrix-synapse-1.61.1-1.fc36	8 Jul 202201:17	–	fedora

[
  {
    "enisaIdVendor": [
      {
        "id": "7f1cd888-7942-37a9-9b54-0ca61b3b8cf9",
        "vendor": {
          "name": "matrix-org"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "ac8bc889-f936-33b3-bc59-78733041f1ab",
        "product": {
          "name": "synapse"
        },
        "product_version": "< 1.61.1"
      }
    ]
  }
]

Source	Link
github	www.github.com/matrix-org/synapse/security/advisories/GHSA-22p3-qrh9-cx32
spec	www.spec.matrix.org/v1.2/client-server-api/
github	www.github.com/matrix-org/synapse/commit/fa1308061802ac7b7d20e954ba7372c5ac292333
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/QGSDQ4YAITCUACAB7SXQZDJIU3IQ4CJD/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/7EARKKJZ2W7WUITFDT4EG4NVATFYJQHF/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-31052
github	www.github.com/pypa/advisory-database/tree/main/vulns/matrix-synapse/PYSEC-2022-224.yaml
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EARKKJZ2W7WUITFDT4EG4NVATFYJQHF/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGSDQ4YAITCUACAB7SXQZDJIU3IQ4CJD/
suse	www.suse.com/security/cve/CVE-2022-31052.html

03 Oct 2025 20:07Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5

CVSS 23.5

EPSS0.00376

SSVC