Access Restriction Bypass

🗓️ 02 Jun 2023 05:33:46Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 15 Views

vulnerability in matrix-synapse software allows remote access

Reporter	Title	Published	Views	Family All 37
AlpineLinux	CVE-2022-39335	26 May 202313:36	–	alpinelinux
CNNVD	Matrix Synapse 信息泄露漏洞	26 May 202300:00	–	cnnvd
CVE	CVE-2022-39335	26 May 202313:36	–	cve
Cvelist	CVE-2022-39335 Synapse does not apply enough checks to servers requesting auth events of events in a room	26 May 202313:36	–	cvelist
Debian CVE	CVE-2022-39335	26 May 202313:36	–	debiancve
EUVD	EUVD-2023-0137	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 37 Update: matrix-synapse-1.63.1-3.fc37	11 Jun 202301:59	–	fedora
Tenable Nessus	Fedora 37 : matrix-synapse / python-matrix-common / rust-pythonize (2023-c0696d7b53)	18 Sep 202300:00	–	nessus
Tenable Nessus	Fedora 37 : matrix-synapse (2023-eb65439ec0)	12 Jun 202300:00	–	nessus
Tenable Nessus	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Synapse vulnerabilities (USN-7444-1)	23 Apr 202500:00	–	nessus

Vulners

Node

matrix-synapse matrix-synapseMatch1.23.0-1debian

AND

debian debian_linuxMatch999

matrix synapseMatch1.59.1-r0python

AND

matrix synapseMatch1.31.0-r0python

AND

matrix synapseMatch1.51.0-r1python

AND

matrix synapseMatch1.46.0-r0python

AND

matrix synapseMatch1.29.0-r0python

AND

matrix synapseMatch1.58.1-r0python

AND

matrix synapseMatch1.40.0-r0python

AND

matrix synapseMatch1.38.1-r0python

AND

matrix synapseMatch1.61.1-r0python

AND

matrix synapseMatch1.35.0-r0python

AND

matrix synapseMatch1.61.0-r0python

AND

matrix synapseMatch1.66.0-r0python

AND

matrix synapseMatch1.34.0-r0python

AND

matrix synapseMatch1.43.0-r0python

AND

matrix synapseMatch1.51.0-r0python

AND

matrix synapseMatch1.32.2-r0python

AND

matrix synapseMatch1.12.3-r0python

AND

matrix synapseMatch1.44.0-r0python

AND

matrix synapseMatch1.38.0-r0python

AND

matrix synapseMatch1.14.0-r0python

AND

matrix synapseMatch1.67.0-r0python

AND

matrix synapseMatch1.48.0-r0python

AND

matrix synapseMatch1.63.0-r0python

AND

matrix synapseMatch1.56.0-r0python

AND

matrix synapseMatch1.62.0-r0python

AND

matrix synapseMatch1.11.1-r0python

AND

matrix synapseMatch1.12.0-r0python

AND

matrix synapseMatch1.36.0-r0python

AND

matrix synapseMatch1.30.1-r0python

AND

matrix synapseMatch1.39.0-r0python

AND

matrix synapseMatch1.12.4-r0python

AND

matrix synapseMatch1.49.2-r0python

AND

matrix synapseMatch1.41.1-r0python

AND

matrix synapseMatch1.55.2-r0python

AND

matrix synapseMatch1.45.1-r0python

AND

matrix synapseMatch1.64.0-r1python

AND

matrix synapseMatch1.37.1-r0python

AND

matrix synapseMatch1.65.0-r0python

AND

matrix synapseMatch1.57.1-r0python

AND

matrix synapseMatch1.64.0-r0python

AND

matrix synapseMatch1.63.1-r0python

AND

matrix synapseMatch1.42.0-r0python

AND

alpinelinux alpine_linuxMatchedge

matrix-synapse matrix-synapseRangev1.38.0rc3–1.38.0rc3python

Source	Link
github	www.github.com/matrix-org/synapse/pull/13823
github	www.github.com/matrix-org/synapse/commit/c06b2b714262825e1d2510b62c38fdeda339f6dc
github	www.github.com/matrix-org/synapse/issues/13288
github	www.github.com/matrix-org/synapse/security/advisories/GHSA-45cj-f97f-ggwv
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/T2MBNMZAFY4RCZL2VGBGAPKGB4JUPZVS/

11 Jun 2023 06:26Current

7High risk

Vulners AI Score7

CVSS 3.15

EPSS0.00138

SSVC