PT-2021-14473

Name of the Vulnerable Software and Affected Versions Synapse versions prior to 1.28.0 Description The issue is caused by missing input validation of some parameters on the endpoints used to confirm third-party identifiers, which could lead to excessive use of disk space and memory, resulting in...

PT-2020-16533

Name of the Vulnerable Software and Affected Versions Matrix Synapse versions prior to 1.21.0 Description The issue is due to unsafe interpolation of the session GET parameter in the AuthRestServlet, allowing a remote attacker to execute a cross-site scripting XSS attack. This can be done by...