Lucene search
+L

1 matches found

OSV
OSV
added 2023/10/31 8:29 p.m.5 views

GHSA-MP92-3JFM-3575 Synapse vulnerable to leak of remote user device information

Impact Cached device information of remote users can be queried from Synapse. This can be used to enumerate the remote users known to a homeserver. Patches System administrators are encouraged to upgrade to Synapse 1.95.1 as soon as possible. Workarounds The federationdomainwhitelist can be used ...

5.3CVSS5.9AI score0.00897EPSS
SaveExploits0References8
Rows per page
Query Builder