Known vulnerabilities in Synapse - page 2

Vendor: Matrix.org
Software: Synapse
Software CPE: cpe:2.3:a:matrix_org:synapse:*:*:*:*:*:*:*:*
Total vulnerabilities: 63
Public exploits: 2
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Synapse Synapse is affected by 63 known vulnerabilities: 1 critical, 4 high, 31 medium, 26 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127007 - Improper Validation of Specified Type of Input
CVE-2025-61672
CWE-1287 Low
No
No
1.138.3, 1.139.1 23.04.2026 SB2026042391
#VU106284 - Improper input validation
CVE-2025-30355
CWE-20 High
No
Exploited
1.127.1 31.03.2025 SB2025033143
SB2025033159
SB2025033160
and 1 more
#VU127005 - Allocation of Resources Without Limits or Throttling
CVE-2024-37302
CWE-770 Medium
No
No
1.106.0 03.12.2024 SB20241203116
#VU127004 - Missing Authentication for Critical Function
CVE-2024-37303
CWE-306 Medium
No
No
1.106.0 03.12.2024 SB20241203116
#VU127003 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2024-53867
CWE-497 Low
No
No
1.120.1 03.12.2024 SB20241203115
SB2024120478
#VU127002 - Allocation of Resources Without Limits or Throttling
CVE-2024-52805
CWE-770 Medium
No
No
1.120.1 03.12.2024 SB20241203115
SB2024120477
SB2024120478
#VU127001 - Improper input validation
CVE-2024-52815
CWE-20 Medium
No
No
1.120.1 03.12.2024 SB20241203115
SB2024120477
SB2024120478
#VU127000 - Interpretation Conflict
CVE-2024-53863
CWE-436 Medium
No
No
1.120.1 03.12.2024 SB20241203115
SB2024120477
SB2024120478
#VU127006 - Incorrect Calculation
CVE-2024-31208
CWE-682 Low
No
No
1.105.1 23.04.2024 SB2024042361
SB2024042483
SB2024042484
and 1 more
#VU81455 - Improper Access Control
CVE-2023-42453
CWE-284 Low
No
No
1.93.0 04.10.2023 SB2023100438
SB2023100444
SB2023100445
and 2 more
#VU81454 - Cleartext Storage of Sensitive Information
CVE-2023-41335
CWE-312 Low
No
No
1.93.0 04.10.2023 SB2023100438
SB2023100444
SB2023100445
and 2 more
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863
CWE-122 Critical
Available
Exploited
1.92.2, 1.92.3 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU79748 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39335
CWE-200 Low
No
No
1.69.0 20.08.2023 SB20230820232
SB20230820233
SB2023090940
#VU77060 - Improper Access Control
CVE-2023-32682
CWE-284 Low
No
No
1.85.0 07.06.2023 SB2023060718
SB20230820209
SB20230820221
and 1 more
#VU77059 - Server-Side Request Forgery (SSRF)
CVE-2023-32683
CWE-918 Medium
No
No
1.85.0 07.06.2023 SB2023060718
SB20230820209
SB20230820221
and 1 more
#VU129603 - Improper input validation
CVE-2021-21393
CWE-20 Medium
No
No
1.28.0 12.04.2021 SB2021041242
SB2021071802
SB2021072328
#VU129602 - Improper input validation
CVE-2021-21394
CWE-20 Medium
No
No
1.28.0 12.04.2021 SB2021041242
SB2021071802
SB2021072328
#VU129607 - Improper Access Control
CVE-2021-21392
CWE-284 Medium
No
No
1.28.0 12.04.2021 SB2021041242
SB2021071802
SB2021072328
#VU129604 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21333
CWE-79 Low
No
No
1.27.0 25.03.2021 SB2021032548
SB2021071802
SB2021072328
#VU129608 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21332
CWE-79 Medium
No
No
1.27.0 25.03.2021 SB2021032548
SB2021071802
SB2021072328


Showing elements 21 - 40 out of 63