Filter
AND
Software
npm/matrix-appservice-bridgematrix-appservice-bridge doesn't verify the sub parameter of an openId token exhange, allowing unauthorized access to provisioning APIs
6.5
First published (updated )
Matrix SynapseDenial of service (via resource exhaustion) due to improper input validation on groups/communities endpoints
6.5
First published (updated )
Matrix SynapseHTML injection in email and account expiry notifications
6.1
First published (updated )
Matrix SynapseURL deny list bypass via oEmbed and image URLs when generating previews in Synapse
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject FedoraURL previews can crash Synapse media repositories or Synapse monoliths
6.5
First published (updated )
Matrix SynapseOpen redirect via transitional IPv6 addresses on dual-stack networks
6.3
First published (updated )
Matrix SynapseSynapse Denial of service due to incorrect application of event authorization rules during state resolution
6.5
First published (updated )
Matrix SynapseDenial of service attack via .well-known lookups
6.5
First published (updated )
Matrix SynapseSynapse does not apply enough checks to servers requesting auth events of events in a room
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Matrix SynapseDenial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints
6.5
First published (updated )
Fedoraproject FedoraImproper validation of receipts allows forged read receipts in matrix synapse
4.3
First published (updated )
Fedoraproject FedoraDenial of service attack via incorrect parameters to federation APIs
6.5
First published (updated )
Fedoraproject Fedoramatrix-synapse vulnerable to denial of service due to malicious server ACL events
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Matrix SydentMalicious users could control the content of invitation emails
5.7
First published (updated )
Matrix SynapseImproper checks for deactivated users during login in synapse
5.4
First published (updated )
Matrix SydentDenial of service (via resource exhaustion) due to improper input validation
4.3
First published (updated )
Matrix SynapseOpen redirects on some federation and push requests
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
npm/matrix-js-sdkA room with itself as a its predecessor will freeze matrix-js-sdk
5.3
First published (updated )
Matrix Matrix Ftp ServerMatrix FTP Server allows remote attackers to cause a denial of service (crash) by logging in using f…
First published (updated )
Matrix ElementA logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-andro…
5.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Matrix Matrix-appservice-bridgeAutomatic room upgrade handling can be used maliciously to bridge a room non-consentually
6.5
First published (updated )
Matrix SynapseUncontrolled Resource Consumption in Matrix Synapse
6.5
First published (updated )
Matrix Javascript SdkMatrix Javascript SDK improper beacon events can cause availability issues
5.3
First published (updated )
Matrix Matrix Irc BridgeIRC mode parameter confusion in matrix-appservice-irc
6.3
First published (updated )
Matrix Matrix Irc Bridgematrix-appservice-irc PgDataStore.ts sql injection
5.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.