Lucene search
Veracode Vulnerability DatabaseVERACODE:31895HistorySep 01, 2021 - 7:35 a.m.
Privilege Escalation
2021-09-0107:35:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
0.001 Low
EPSS
Percentile
35.8%
matrix_synapse is vulnerable to privilege escalation. An unauthorised user knowing Room ID of a private room and setting room’s history visibility to shared is allowed to enumerate the room’s members, including their display names.
References
github.com/matrix-org/synapse/commit/cb35df940a
github.com/matrix-org/synapse/releases/tag/v1.41.1
github.com/matrix-org/synapse/security/advisories/GHSA-3x4c-pq33-4w3q
lists.fedoraproject.org/archives/list/[email protected]/message/2VHDEPCZ22GJFMZCWA2XZAGPOEV72POF/
lists.fedoraproject.org/archives/list/[email protected]/message/PXT7ID7DNBRN2TVTETU3SYQHJKEG6PXN/
Related
nvd
nvd
CVE-2021-39164
2021-08-31 17:15:08
cnvd
cnvd
Matrix Information Breach Vulnerability
2021-09-02 00:00:00
debiancve
debiancve
CVE-2021-39164
2021-08-31 17:15:08
github
github
Improper authorisation of members discloses room membership to non-members
2021-09-01 18:25:27
prion
prion
Code injection
2021-08-31 17:15:00
osv
osv
CVE-2021-39164
2021-08-31 17:15:08
PYSEC-2021-425
2021-08-31 17:15:00
Improper authorisation of members discloses room membership to non-members
2021-09-01 18:25:27
cve
cve
CVE-2021-39164
2021-08-31 17:15:08
ubuntucve
ubuntucve
CVE-2021-39164
2021-08-31 00:00:00
cvelist
cvelist
alpinelinux
alpinelinux
CVE-2021-39164
2021-08-31 17:15:08
nessus
nessus
fedora
fedora
[SECURITY] Fedora 34 Update: matrix-synapse-1.41.1-1.fc34
2021-09-08 15:07:22
[SECURITY] Fedora 35 Update: matrix-synapse-1.41.1-1.fc35
2021-09-24 20:41:56
freebsd
freebsd
py-matrix-synapse -- several vulnerabilities
2021-08-31 00:00:00
openvas
openvas
Fedora: Security Advisory for matrix-synapse (FEDORA-2021-f12fdca1bf)
2021-10-02 00:00:00
Fedora: Security Advisory for matrix-synapse (FEDORA-2021-2e8ed15b14)
2021-09-09 00:00:00