PT-2021-23240

Name of the Vulnerable Software and Affected Versions Synapse versions prior to 1.47.1 Description Synapse instances with the media repository enabled can be tricked into downloading a file from a remote server into an arbitrary directory. No authentication is required for the affected endpoint...