Known vulnerabilities in Synapse - page 2

Vendor: Matrix.org
Software: Synapse
Software CPE: cpe:2.3:a:matrix_org:synapse:*:*:*:*:*:*:*:*
Total vulnerabilities: 63
Public exploits: 2
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Synapse Synapse is affected by 63 known vulnerabilities: 1 critical, 4 high, 31 medium, 26 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127002 - Allocation of Resources Without Limits or Throttling
CVE-2024-52805
CWE-770 Medium
No
No
1.120.1 03.12.2024 SB20241203115
SB2024120477
SB2024120478
#VU127006 - Incorrect Calculation
CVE-2024-31208
CWE-682 Low
No
No
1.105.1 23.04.2024 SB2024042361
SB2024042483
SB2024042484
and 1 more
#VU129610 - Improper Access Control
CVE-2023-43796
CWE-284 Medium
No
No
1.95.1, 1.96.0 31.10.2023 SB20231031124
SB2024010704
SB2023110195
and 1 more
#VU129609 - Improper input validation
CVE-2023-45129
CWE-20 Low
No
No
1.94.0 10.10.2023 SB20231010105
SB2024010704
SB20231011104
and 2 more
#VU81455 - Improper Access Control
CVE-2023-42453
CWE-284 Low
No
No
1.93.0 04.10.2023 SB2023100438
SB2023100444
SB2023100445
and 2 more
#VU81454 - Cleartext Storage of Sensitive Information
CVE-2023-41335
CWE-312 Low
No
No
1.93.0 04.10.2023 SB2023100438
SB2023100444
SB2023100445
and 2 more
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863
CWE-122 Critical
Available
Exploited
1.92.2, 1.92.3 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU79748 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39335
CWE-200 Low
No
No
1.69.0 20.08.2023 SB20230820232
SB20230820233
SB2023090940
#VU77060 - Improper Access Control
CVE-2023-32682
CWE-284 Low
No
No
1.85.0 07.06.2023 SB2023060718
SB20230820209
SB20230820221
and 1 more
#VU77059 - Server-Side Request Forgery (SSRF)
CVE-2023-32683
CWE-918 Medium
No
No
1.85.0 07.06.2023 SB2023060718
SB20230820209
SB20230820221
and 1 more
#VU129605 - Improper input validation
CVE-2023-32323
CWE-20 Low
No
No
1.74.0 24.05.2023 SB2023052450
SB2023090940
#VU129606 - Incorrect Authorization
CVE-2022-39374
CWE-863 Low
No
No
1.68.0 24.05.2023 SB2023052449
SB2023090940
#VU76406 - Improper Handling of Exceptional Conditions
CVE-2022-31152
CWE-755 Medium
No
No
1.62.0 22.05.2023 SB2023052216
#VU76405 - Uncontrolled Recursion
CVE-2022-31052
CWE-674 Medium
No
No
1.61.1 22.05.2023 SB2023052215
SB2022062942
SB2022062943
#VU76261 - Resource exhaustion
CVE-2022-41952
CWE-400 Medium
No
No
1.53.0 17.05.2023 SB2023051776
#VU58357 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-41281
CWE-22 Medium
No
No
1.47.1 24.11.2021 SB2021112415
SB2021112425
SB2021112426
and 2 more
#VU56226 - Exposure of sensitive information to an unauthorized actor
CVE-2021-39163
CWE-200 Low
No
No
1.41.1, 1.42.0 rc1 01.09.2021 SB2021090103
SB2021083145
SB2021083146
#VU56225 - Exposure of sensitive information to an unauthorized actor
CVE-2021-39164
CWE-200 Low
No
No
1.41.1, 1.42.0 rc1 01.09.2021 SB2021090103
SB2021083145
SB2021083146
#VU53201 - Resource Management Errors
CVE-2021-29471
CWE-399
No
No
1.33.2 12.05.2021 SB2021051229
SB2021052516
SB2021071802
and 1 more
#VU129601 - Improper input validation
CWE-20 Medium
No
No
1.33.0 11.05.2021 SB2021051175


Showing elements 21 - 40 out of 63