Lucene search
+L

5 matches found

OSV
OSV
added 2026/07/07 2:34 p.m.10 views

PYSEC-2026-1610 Synapse Matrix has a partial room state leak via Sliding Sync

Impact The Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected. Patches Synapse version 1.120.1 fixes the problem. Workarounds Disable Sliding Sync. References...

4.3CVSS6.7AI score0.00427EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2024/12/04 3:48 a.m.8 views

SUSE CVE-2024-53867

Synapse is an open-source Matrix homeserver. The Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected. This vulnerability is fixed in 1.120.1...

4.3CVSS6.7AI score0.00427EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2024/12/03 6:44 p.m.30 views

Synapse Matrix has a partial room state leak via Sliding Sync

Impact The Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected. Patches Synapse version 1.120.1 fixes the problem. Workarounds Disable Sliding Sync. References...

4.3CVSS6.5AI score0.00427EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/12/03 5:15 p.m.19 views

UBUNTU-CVE-2024-53867

Synapse is an open-source Matrix homeserver. The Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected. This vulnerability is fixed in 1.120.1...

4.3CVSS5.8AI score0.00427EPSS
SaveExploits0References4
OSV
OSV
added 2024/12/03 4:52 p.m.18 views

CVE-2024-53867 Synapse Matrix has a partial room state leak via Sliding Sync

Synapse is an open-source Matrix homeserver. The Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected. This vulnerability is fixed in 1.120.1...

4.3CVSS6AI score
SaveExploits0References4
Rows per page
Query Builder