Synapse Matrix has a partial room state leak via Sliding Sync

Mô tả

Tham khảo

• element-hq/synapse security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2024-53867 · ADVISORY
• matrix-org/matrix-spec-proposals#4186 · WEB
• element-hq/synapse · PACKAGE
• pypi.org/project/matrix-synapse · PACKAGE
• GitHub Advisory GHSA-56w4-5538-8v8h · ADVISORY

Lỗ hổng khác của matrix-synapse

• CVE-2026-45078TRUNG BÌNH 5.5Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, local authenticated users can cause Synapse to starve other re…
• CVE-2026-45076THẤP 2.7Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room event…
• CVE-2025-61672TRUNG BÌNH 5.3Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.13…
• CVE-2025-30355CAO 7.5Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, prevent Synapse versio…
• CVE-2024-53863NGHIÊM TRỌNG 9.1Synapse is an open-source Matrix homeserver. In Synapse versions before 1.120.1, enabling the dynamic_thumbnails option or processing a spec…