Lucene search
+L

4 matches found

OSV
OSV
added 2025/10/08 2:55 p.m.10 views

CVE-2025-61672 Synapse: Invalid device keys degrade federation functionality

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeserver...

5.3CVSS6.6AI score
SaveExploits0References8
Rows per page
Query Builder