Filter
AND
Software
npm/matrix-js-sdkA room with itself as a its predecessor will freeze matrix-js-sdk
5.3
First published (updated )
Fedoraproject FedoraSynapse vulnerable to leak of remote user device information
5.3
First published (updated )
Fedoraproject Fedoramatrix-synapse vulnerable to denial of service due to malicious server ACL events
4.9
First published (updated )
Fedoraproject FedoraImproper validation of receipts allows forged read receipts in matrix synapse
4.3
First published (updated )
npm/matrix-appservice-bridgematrix-appservice-bridge doesn't verify the sub parameter of an openId token exhange, allowing unauthorized access to provisioning APIs
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Matrix SynapseURL deny list bypass via oEmbed and image URLs when generating previews in Synapse
5.4
First published (updated )
Matrix SynapseImproper checks for deactivated users during login in synapse
5.4
First published (updated )
Matrix SynapseSynapse Denial of service due to incorrect application of event authorization rules during state resolution
6.5
First published (updated )
Matrix SynapseSynapse does not apply enough checks to servers requesting auth events of events in a room
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Matrix Javascript Sdkmatrix-js-sdk vulnerable to invisible eavesdropping in group calls
5.3
First published (updated )
Matrix SynapseUncontrolled Resource Consumption in Matrix Synapse
6.5
First published (updated )
Matrix Matrix Irc Bridgematrix-appservice-irc PgDataStore.ts sql injection
5.6
First published (updated )
Matrix Javascript SdkMatrix Javascript SDK improper beacon events can cause availability issues
5.3
First published (updated )
Matrix Matrix Irc BridgeIRC mode parameter confusion in matrix-appservice-irc
6.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject FedoraURL previews can crash Synapse media repositories or Synapse monoliths
6.5
First published (updated )
Matrix ElementA logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-andro…
5.9
First published (updated )
Matrix Matrix-appservice-bridgeAutomatic room upgrade handling can be used maliciously to bridge a room non-consentually
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Matrix SydentMalicious users could control the content of invitation emails
5.7
First published (updated )
Matrix SydentDenial of service (via resource exhaustion) due to improper input validation
4.3
First published (updated )
Matrix SynapseOpen redirect via transitional IPv6 addresses on dual-stack networks
6.3
First published (updated )
Matrix SynapseDenial of service (via resource exhaustion) due to improper input validation on groups/communities endpoints
6.5
First published (updated )
Matrix SynapseDenial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Matrix SynapseHTML injection in email and account expiry notifications
6.1
First published (updated )
Matrix SynapseOpen redirects on some federation and push requests
6.1
First published (updated )
Matrix SynapseDenial of service attack via .well-known lookups
6.5
First published (updated )
Fedoraproject FedoraDenial of service attack via incorrect parameters to federation APIs
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.