6 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-21332
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In...
CVE-2021-21332
Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the password reset endpoint served via Synapse was vulnerable to cross-site scripting XSS attacks. The...
UBUNTU-CVE-2021-21332
Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the password reset endpoint served via Synapse was vulnerable to cross-site scripting XSS attacks. The...
CVE-2021-21332
CVE-2021-21332 describes an XSS vulnerability in the password reset endpoint of Synapse (Matrix reference homeserver, Python). Prior to version 1.27.0, an attacker could execute script via the password_reset flow, potentially access cookies and browser data, and leverage CSRF risks on the same do...
CVE-2021-21332 Cross-site scripting (XSS) vulnerability in the password reset endpoint
Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the password reset endpoint served via Synapse was vulnerable to cross-site scripting XSS attacks. The...
raiden (>=0.100.2rc4, <=0.100.3rc1) potentially affected by CVE-2021-21332 via matrix-synapse (0.33.9)
matrix-synapse PYPI version 0.33.9 is affected by a known vulnerability. The following packages have a transitive dependency on matrix-synapse and may be impacted: - raiden =0.100.2rc4, =0.100.3rc1 Source cves: CVE-2021-21332 Source advisory: OSV:GHSA-246W-56M2-5899...