Lucene search
+L

4333 matches found

OSV
OSV
•added 2021/04/12 10:15 p.m.•30 views

CVE-2021-21392

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

6.3CVSS6.3AI score
SaveExploits0References4
NVD
NVD
•added 2021/04/12 10:15 p.m.•36 views

CVE-2021-21393

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

6.5CVSS0.01596EPSS
SaveExploits0References5
NVD
NVD
•added 2021/04/12 10:15 p.m.•50 views

CVE-2021-21392

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

6.3CVSS0.00944EPSS
SaveExploits0References4
OSV
OSV
•added 2021/04/12 10:15 p.m.•36 views

DEBIAN-CVE-2021-21392

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

6.3CVSS6.7AI score0.00944EPSS
SaveExploits0References1
Prion
Prion
•added 2021/04/12 10:15 p.m.•33 views

Design/Logic Flaw

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

4.9CVSS6.5AI score0.00944EPSS
SaveExploits0References4Affected Software2
Prion
Prion
•added 2021/04/12 10:15 p.m.•19 views

Input validation

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

4.3CVSS6.7AI score0.01596EPSS
SaveExploits0References5Affected Software2
OSV
OSV
•added 2021/04/12 10:15 p.m.•25 views

PYSEC-2021-26

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

6.5CVSS0.8AI score0.01596EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2021/04/12 10:15 p.m.•31 views

CVE-2021-21392

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

6.3CVSS6.6AI score0.00944EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2021/04/12 10:15 p.m.•10 views

CVE-2021-21393

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

6.5CVSS6.6AI score0.01596EPSS
SaveExploits0References7Affected Software1
attackerkb
attackerkb
•added 2021/04/12 10:15 p.m.•10 views

CVE-2021-21392

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

6.3CVSS6.6AI score0.00944EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2021/04/12 10:15 p.m.•24 views

PYSEC-2021-25

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

6.3CVSS1.7AI score0.00944EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2021/04/12 10:15 p.m.•37 views

CVE-2021-21393

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

6.5CVSS6.6AI score0.01596EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2021/04/12 9:50 p.m.•67 views

CVE-2021-21392 Open redirect via transitional IPv6 addresses on dual-stack networks

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

6.3CVSS6.9AI score0.00944EPSS
SaveExploits0References4
CVE
CVE
•added 2021/04/12 9:50 p.m.•131 views

CVE-2021-21392

Synapse (matrix-synapse) prior to version 1.28.0 is affected by a vulnerability where requests to user-provided domains could escape external IP restrictions on dual-stack networks due to transitional IPv6 addresses. This may allow outbound requests to internal infrastructure during federation, i...

6.3CVSS6.5AI score0.00944EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2021/04/12 9:50 p.m.•1 views

CVE-2021-21392

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

7CVSS0.00944EPSS
SaveExploits0References10
CVE
CVE
•added 2021/04/12 9:35 p.m.•133 views

CVE-2021-21393

Summary: CVE-2021-21393 affects Synapse (matrix-synapse) prior to version 1.28.0, where missing input validation on endpoints that confirm third-party identifiers could allow excessive disk space and memory use, causing resource exhaustion. The issue is not part of the Matrix specification; maxim...

6.5CVSS6AI score0.01596EPSS
SaveExploits0References5Affected Software1
Mend
Mend
•added 2021/04/12 9:35 p.m.•2 views

CVE-2021-21393

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

6.5CVSS0.01596EPSS
SaveExploits0References12
Cvelist
Cvelist
•added 2021/04/12 9:35 p.m.•46 views

CVE-2021-21393 Denial of service (via resource exhaustion) due to improper input validation on groups/communities endpoints

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

5.3CVSS7AI score0.01596EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2021/04/12 9:35 p.m.•78 views

CVE-2021-21393

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

6.5CVSS6.4AI score0.01596EPSS
SaveExploits0
OSV
OSV
•added 2021/04/12 9:15 p.m.•27 views

CVE-2021-21394

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

6.5CVSS6.4AI score
SaveExploits0References5
Rows per page
Query Builder