Lucene search
+L

3 matches found

osv_alpine
osv_alpine
•added 2025/10/08 3:16 p.m.•13 views

ALPINE-CVE-2025-61672

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeserver...

5.3CVSS5.9AI score0.00476EPSS
SaveExploits0References1
Mend
Mend
•added 2025/10/08 2:55 p.m.•12 views

CVE-2025-61672

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeserver...

5.4CVSS5.9AI score0.00476EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/08 12:00 a.m.•8 views

CVE-2025-61672: Improper Validation of Specified Type of Input

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeserver...

5.3CVSS6AI score0.00476EPSS
SaveExploits0References2
Rows per page
Query Builder