Lucene search
+L

6 matches found

Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2021-21332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In...

8.2CVSS7.4AI score0.01221EPSS
SaveExploits0References2
NVD
NVD
•added 2021/03/26 8:15 p.m.•36 views

CVE-2021-21332

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the password reset endpoint served via Synapse was vulnerable to cross-site scripting XSS attacks. The...

8.2CVSS0.01221EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2021/03/26 8:15 p.m.•32 views

UBUNTU-CVE-2021-21332

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the password reset endpoint served via Synapse was vulnerable to cross-site scripting XSS attacks. The...

8.2CVSS7.2AI score0.01221EPSS
SaveExploits0References4
CVE
CVE
•added 2021/03/26 7:55 p.m.•154 views

CVE-2021-21332

CVE-2021-21332 describes an XSS vulnerability in the password reset endpoint of Synapse (Matrix reference homeserver, Python). Prior to version 1.27.0, an attacker could execute script via the password_reset flow, potentially access cookies and browser data, and leverage CSRF risks on the same do...

8.2CVSS7AI score0.01221EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2021/03/26 7:55 p.m.•48 views

CVE-2021-21332 Cross-site scripting (XSS) vulnerability in the password reset endpoint

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the password reset endpoint served via Synapse was vulnerable to cross-site scripting XSS attacks. The...

6.9CVSS8AI score0.01221EPSS
SaveExploits0References5
vulnersOsv
vulnersOsv
•added 2021/03/26 7:52 p.m.•2 views

raiden (>=0.100.2rc4, <=0.100.3rc1) potentially affected by CVE-2021-21332 via matrix-synapse (0.33.9)

matrix-synapse PYPI version 0.33.9 is affected by a known vulnerability. The following packages have a transitive dependency on matrix-synapse and may be impacted: - raiden =0.100.2rc4, =0.100.3rc1 Source cves: CVE-2021-21332 Source advisory: OSV:GHSA-246W-56M2-5899...

8.2CVSS0.01221EPSS
SaveExploits0
Rows per page
Query Builder