Lucene search
K

11 matches found

NVD
NVD
added 2023/05/26 2:15 p.m.15 views

CVE-2022-39374

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. If Synapse and a malicious homeserver are both joined to the same room, the malicious homeserver can trick Synapse into accepting previously rejected events into its view of the current state of that...

6.5CVSS6.3AI score0.00169EPSS
Exploits0References3
OSV
OSV
added 2023/05/26 2:15 p.m.1 views

DEBIAN-CVE-2022-39374

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. If Synapse and a malicious homeserver are both joined to the same room, the malicious homeserver can trick Synapse into accepting previously rejected events into its view of the current state of that...

6.5CVSS6.4AI score0.00169EPSS
Exploits0References1
OSV
OSV
added 2023/05/26 2:15 p.m.0 views

UBUNTU-CVE-2022-39374

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. If Synapse and a malicious homeserver are both joined to the same room, the malicious homeserver can trick Synapse into accepting previously rejected events into its view of the current state of that...

6.5CVSS6.5AI score0.00169EPSS
Exploits0References4
PyPA
PyPA
added 2023/05/26 2:15 p.m.7 views

PYSEC-2023-66

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. If Synapse and a malicious homeserver are both joined to the same room, the malicious homeserver can trick Synapse into accepting previously rejected events into its view of the current state of that...

6.5CVSS6.8AI score0.00169EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2023/05/26 2:15 p.m.13 views

PYSEC-2023-66

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. If Synapse and a malicious homeserver are both joined to the same room, the malicious homeserver can trick Synapse into accepting previously rejected events into its view of the current state of that...

6.5CVSS6.6AI score0.00169EPSS
Exploits0References2
CVE
CVE
added 2023/05/26 1:44 p.m.66 views

CVE-2022-39374

Synapse (Matrix.org) vulnerable to CVE-2022-39374: when a malicious homeserver shares a room with a vulnerable Synapse, it can trick Synapse into accepting previously rejected events, causing subsequent messages and state changes from that server in the room to be rejected. This issue has been pa...

6.5CVSS6.2AI score0.00169EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/05/26 1:44 p.m.22 views

CVE-2022-39374 Synapse Denial of service due to incorrect application of event authorization rules during state resolution

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. If Synapse and a malicious homeserver are both joined to the same room, the malicious homeserver can trick Synapse into accepting previously rejected events into its view of the current state of that...

6.5CVSS6.5AI score0.00169EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2023/05/26 1:44 p.m.19 views

CVE-2022-39374

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. If Synapse and a malicious homeserver are both joined to the same room, the malicious homeserver can trick Synapse into accepting previously rejected events into its view of the current state of that...

6.5CVSS6.3AI score0.00169EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2023/05/26 1:44 p.m.9 views

CVE-2022-39374 Synapse Denial of service due to incorrect application of event authorization rules during state resolution

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. If Synapse and a malicious homeserver are both joined to the same room, the malicious homeserver can trick Synapse into accepting previously rejected events into its view of the current state of that...

6.5CVSS6.4AI score0.00169EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/05/24 12:0 a.m.2 views

PT-2023-13722 · Synapse +2 · Synapse +2

Name of the Vulnerable Software and Affected Versions: Synapse versions prior to 1.68.0 Description: The issue occurs when Synapse and a malicious homeserver are both joined to the same room. The malicious homeserver can trick Synapse into accepting previously rejected events into its view of the...

8.2CVSS5.7AI score0.0419EPSS
Exploits0References33
CBLMariner
CBLMariner
added 2023/03/24 11:57 p.m.69 views

CVE-2024-28182 affecting package rust for versions less than 1.68.0-1

CVE-2024-28182 affecting package rust for versions less than 1.68.0-1. A patched version of the package is available...

5.3CVSS5.8AI score0.24971EPSS
Exploits1
Rows per page
Query Builder