1 matches found
GHSA-MP92-3JFM-3575 Synapse vulnerable to leak of remote user device information
Impact Cached device information of remote users can be queried from Synapse. This can be used to enumerate the remote users known to a homeserver. Patches System administrators are encouraged to upgrade to Synapse 1.95.1 as soon as possible. Workarounds The federationdomainwhitelist can be used ...
5.3CVSS5.9AI score0.00897EPSS
SaveExploits0References8
20