Authorization Bypass

🗓️ 16 Jun 2023 11:15:44Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 18 Views

matrix-synapse Authorization Bypass vulnerability due to improper user deactivation validation during logi

Reporter	Title	Published	Views	Family All 27
AlpineLinux	CVE-2023-32682	6 Jun 202318:20	–	alpinelinux
CNNVD	Matrix Synapse 授权问题漏洞	6 Jun 202300:00	–	cnnvd
CVE	CVE-2023-32682	6 Jun 202318:20	–	cve
Cvelist	CVE-2023-32682 Improper checks for deactivated users during login in synapse	6 Jun 202318:20	–	cvelist
Debian CVE	CVE-2023-32682	6 Jun 202318:20	–	debiancve
EUVD	EUVD-2023-0140	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 38 Update: matrix-synapse-1.85.2-1.fc38	17 Jun 202301:24	–	fedora
Tenable Nessus	Fedora 38 : matrix-synapse (2023-56760afca8)	16 Jun 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2023-32682	27 Aug 202500:00	–	nessus
Github Security Blog	Synapse has improper checks for deactivated users during login	6 Jun 202316:40	–	github

Vulners

Node

matrix synapseMatch1.29.0-r0python

AND

matrix synapseMatch1.35.0-r0python

AND

matrix synapseMatch1.80.0-r0python

AND

matrix synapseMatch1.38.0-r0python

AND

matrix synapseMatch1.30.1-r0python

AND

matrix synapseMatch1.77.0-r0python

AND

matrix synapseMatch1.81.0-r0python

AND

matrix synapseMatch1.43.0-r0python

AND

matrix synapseMatch1.12.4-r0python

AND

matrix synapseMatch1.48.0-r0python

AND

matrix synapseMatch1.38.1-r0python

AND

matrix synapseMatch1.61.1-r0python

AND

matrix synapseMatch1.11.1-r0python

AND

matrix synapseMatch1.51.0-r1python

AND

matrix synapseMatch1.14.0-r0python

AND

matrix synapseMatch1.62.0-r0python

AND

matrix synapseMatch1.72.0-r0python

AND

matrix synapseMatch1.76.0-r0python

AND

matrix synapseMatch1.71.0-r0python

AND

matrix synapseMatch1.63.0-r0python

AND

matrix synapseMatch1.70.1-r0python

AND

matrix synapseMatch1.74.0-r0python

AND

matrix synapseMatch1.40.0-r0python

AND

matrix synapseMatch1.64.0-r1python

AND

matrix synapseMatch1.12.0-r0python

AND

matrix synapseMatch1.67.0-r0python

AND

matrix synapseMatch1.66.0-r0python

AND

matrix synapseMatch1.82.0-r0python

AND

matrix synapseMatch1.73.0-r0python

AND

matrix synapseMatch1.83.0-r0python

AND

matrix synapseMatch1.45.1-r0python

AND

matrix synapseMatch1.64.0-r0python

AND

matrix synapseMatch1.61.0-r0python

AND

matrix synapseMatch1.63.1-r0python

AND

matrix synapseMatch1.32.2-r0python

AND

matrix synapseMatch1.39.0-r0python

AND

matrix synapseMatch1.49.2-r0python

AND

matrix synapseMatch1.44.0-r0python

AND

matrix synapseMatch1.34.0-r0python

AND

matrix synapseMatch1.36.0-r0python

AND

matrix synapseMatch1.37.1-r0python

AND

matrix synapseMatch1.78.0-r0python

AND

matrix synapseMatch1.55.2-r0python

AND

matrix synapseMatch1.56.0-r0python

AND

matrix synapseMatch1.57.1-r0python

AND

matrix synapseMatch1.46.0-r0python

AND

matrix synapseMatch1.65.0-r0python

AND

matrix synapseMatch1.58.1-r0python

AND

matrix synapseMatch1.84.1-r0python

AND

matrix synapseMatch1.42.0-r0python

AND

matrix synapseMatch1.75.0-r1python

AND

matrix synapseMatch1.59.1-r0python

AND

matrix synapseMatch1.79.0-r1python

AND

matrix synapseMatch1.51.0-r0python

AND

matrix synapseMatch1.12.3-r0python

AND

matrix synapseMatch1.31.0-r0python

AND

matrix synapseMatch1.41.1-r0python

AND

alpinelinux alpine_linuxMatchedge

matrix-synapse matrix-synapseMatch1.23.0-1debian

AND

debian debian_linuxMatch999

matrix synapseMatch1.82.0-r0python

AND

matrix synapseMatch1.83.0-r0python

AND

matrix synapseMatch1.84.1-r0python

AND

alpinelinux alpine_linuxMatch3.18

matrix-synapse matrix-synapseRange1.80.0rc1–1.84.1python

Source	Link
github	www.github.com/matrix-org/synapse/pull/15624
github	www.github.com/matrix-org/synapse/commit/af4a881b1f7e814e921d383ef0f5e7cf554ec27b
github	www.github.com/advisories/GHSA-26c5-ppr8-f33p
github	www.github.com/matrix-org/synapse/pull/15634
github	www.github.com/matrix-org/synapse/security/advisories/GHSA-26c5-ppr8-f33p
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/X6DH5A5YEB5LRIPP32OUW25FCGZFCZU2/
matrix-org	www.matrix-org.github.io/synapse/latest/admin_api/user_admin_api.html
matrix-org	www.matrix-org.github.io/synapse/latest/jwt.html
matrix-org	www.matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html

20 Jun 2023 11:05Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15.4

EPSS0.00975

SSVC