Lucene search

K
osvGoogleOSV:GHSA-GWF7-VFJF-WF6X
HistoryMay 24, 2022 - 4:45 p.m.

matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG

2022-05-2416:45:24
Google
osv.dev
12

0.002 Low

EPSS

Percentile

53.8%

An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it easier for attackers to predict a Sydent authentication token or a Synapse random ID.

0.002 Low

EPSS

Percentile

53.8%