Lucene search

CVE-2023-42453

🗓️ 27 Sep 2023 15:32:19Reported by [email protected]Type

Synapse open-source Matrix homeserver read receipts vulnerability patch

Reporter	Title	Published	Views	Family All 23
UbuntuCve	CVE-2023-42453	27 Sep 202300:00	–	ubuntucve
OSV	CVE-2023-42453	27 Sep 202315:19	–	osv
OSV	matrix-synapse vulnerable to improper validation of receipts allows forged read receipts	26 Sep 202319:20	–	osv
OSV	PYSEC-2023-180	27 Sep 202315:19	–	osv
OSV	matrix-synapse-1.93.0-1.1 on GA media	15 Jun 202400:00	–	osv
Debian CVE	CVE-2023-42453	27 Sep 202315:19	–	debiancve
Github Security Blog	matrix-synapse vulnerable to improper validation of receipts allows forged read receipts	26 Sep 202319:20	–	github
Cvelist	CVE-2023-42453 Improper validation of receipts allows forged read receipts in matrix synapse	26 Sep 202320:49	–	cvelist
Prion	Design/Logic Flaw	27 Sep 202315:19	–	prion
Veracode	Improper Authorization	28 Sep 202307:14	–	veracode

Nvd

Node

matrix synapseRange1.34.0–1.93.0

Node

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

Source	Link
security	www.security.gentoo.org/glsa/202401-12
github	www.github.com/matrix-org/synapse/pull/16327
github	www.github.com/matrix-org/synapse/security/advisories/GHSA-7565-cq32-vx2x
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/N6P4QULVUE254WI7XF2LWWOGHCYVFXFY/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/65QPC55I4D27HIZP7H2NQ34EOXHPP4AO/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/2AFB2Y3S2VCPCN5P2XCZTG24MBMZ7DM4/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Sep 2023 15:19Current

4.1Medium risk

Vulners AI Score4.1

CVSS34.3

EPSS0.001

CWE-285