Lucene search
+L

1268 matches found

OSV
OSV
•added 2021/04/12 10:15 p.m.•35 views

DEBIAN-CVE-2021-21392

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

6.3CVSS6.7AI score0.00944EPSS
SaveExploits0References1
OSV
OSV
•added 2021/04/12 10:15 p.m.•9 views

DEBIAN-CVE-2021-21393

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

6.5CVSS6.7AI score0.01596EPSS
SaveExploits0References1
OSV
OSV
•added 2021/04/12 10:15 p.m.•28 views

CVE-2021-21392

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

6.3CVSS6.3AI score
SaveExploits0References4
OSV
OSV
•added 2021/04/12 10:15 p.m.•25 views

CVE-2021-21393

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

6.5CVSS6.4AI score
SaveExploits0References5
NVD
NVD
•added 2021/04/12 10:15 p.m.•45 views

CVE-2021-21392

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

6.3CVSS0.00944EPSS
SaveExploits0References4
NVD
NVD
•added 2021/04/12 10:15 p.m.•35 views

CVE-2021-21393

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

6.5CVSS0.01596EPSS
SaveExploits0References5
PyPA
PyPA
•added 2021/04/12 10:15 p.m.•9 views

PYSEC-2021-26

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

6.5CVSS6.7AI score0.01596EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2021/04/12 10:15 p.m.•33 views

Design/Logic Flaw

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

4.9CVSS6.5AI score0.00944EPSS
SaveExploits0References4Affected Software2
UbuntuCve
UbuntuCve
•added 2021/04/12 10:15 p.m.•31 views

CVE-2021-21392

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

6.3CVSS6.6AI score0.00944EPSS
SaveExploits0References4
PyPA
PyPA
•added 2021/04/12 10:15 p.m.•12 views

PYSEC-2021-25

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

6.3CVSS6.7AI score0.00944EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2021/04/12 10:15 p.m.•19 views

UBUNTU-CVE-2021-21392

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

6.3CVSS5.8AI score0.00944EPSS
SaveExploits0References5
Prion
Prion
•added 2021/04/12 10:15 p.m.•19 views

Input validation

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

4.3CVSS6.7AI score0.01596EPSS
SaveExploits0References5Affected Software2
OSV
OSV
•added 2021/04/12 10:15 p.m.•25 views

PYSEC-2021-26

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

6.5CVSS0.8AI score0.01596EPSS
SaveExploits0References4
OSV
OSV
•added 2021/04/12 10:15 p.m.•24 views

PYSEC-2021-25

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

6.3CVSS1.7AI score0.00944EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/04/12 10:15 p.m.•10 views

CVE-2021-21392

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

6.3CVSS6.6AI score0.00944EPSS
SaveExploits0References6Affected Software1
UbuntuCve
UbuntuCve
•added 2021/04/12 10:15 p.m.•35 views

CVE-2021-21393

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

6.5CVSS6.6AI score0.01596EPSS
SaveExploits0References5
OSV
OSV
•added 2021/04/12 10:15 p.m.•25 views

UBUNTU-CVE-2021-21393

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

6.5CVSS5.8AI score0.01596EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2021/04/12 9:50 p.m.•65 views

CVE-2021-21392 Open redirect via transitional IPv6 addresses on dual-stack networks

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

6.3CVSS6.9AI score0.00944EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2021/04/12 9:50 p.m.•78 views

CVE-2021-21392

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

6.3CVSS6.2AI score0.00944EPSS
SaveExploits0
CVE
CVE
•added 2021/04/12 9:50 p.m.•129 views

CVE-2021-21392

Synapse (matrix-synapse) prior to version 1.28.0 is affected by a vulnerability where requests to user-provided domains could escape external IP restrictions on dual-stack networks due to transitional IPv6 addresses. This may allow outbound requests to internal infrastructure during federation, i...

6.3CVSS6.5AI score0.00944EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder