Denial Of Service (DoS)

2020-11-2607:47:46

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

synapse

denial of service

json

vulnerability

non-standard values

client

EPSS

0.007

Percentile

80.5%

JSON

synapse is vulnerable to denial of service. An attacker can send an invalid JSON data to Synapse which will relay the data to clients. This is possible as non-standard NaN, Infinity, and -Infinity JSON values are not sanitized and are passed on to the client which could crash or hang.