Known vulnerabilities in Synapse - page 3

Vendor: Matrix.org
Software: Synapse
Software CPE: cpe:2.3:a:matrix_org:synapse:*:*:*:*:*:*:*:*
Total vulnerabilities: 63
Public exploits: 2
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Synapse Synapse is affected by 63 known vulnerabilities: 1 critical, 4 high, 31 medium, 26 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76406 - Improper Handling of Exceptional Conditions
CVE-2022-31152
CWE-755 Medium
No
No
1.62.0 22.05.2023 SB2023052216
#VU76405 - Uncontrolled Recursion
CVE-2022-31052
CWE-674 Medium
No
No
1.61.1 22.05.2023 SB2023052215
SB2022062942
SB2022062943
#VU76261 - Resource exhaustion
CVE-2022-41952
CWE-400 Medium
No
No
1.53.0 17.05.2023 SB2023051776
#VU76260 - Improper Verification of Cryptographic Signature
CVE-2018-16515
CWE-347 High
No
No
0.33.3.1 17.05.2023 SB2018091858
SB2023051777
SB2018090645
and 1 more
#VU76259 - Key Management Errors
CVE-2019-5885
CWE-320 Medium
No
No
0.34.0.1 17.05.2023 SB2019032141
SB2023051777
SB2019012435
and 2 more
#VU76258 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2019-11842
CWE-338 Medium
No
No
0.99.3.1 17.05.2023 SB2019050925
SB2023051777
#VU58357 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-41281
CWE-22 Medium
No
No
1.47.1 24.11.2021 SB2021112415
SB2021112425
SB2021112426
and 2 more
#VU56226 - Exposure of sensitive information to an unauthorized actor
CVE-2021-39163
CWE-200 Low
No
No
1.41.1, 1.42.0 rc1 01.09.2021 SB2021090103
SB2021083145
SB2021083146
#VU56225 - Exposure of sensitive information to an unauthorized actor
CVE-2021-39164
CWE-200 Low
No
No
1.41.1, 1.42.0 rc1 01.09.2021 SB2021090103
SB2021083145
SB2021083146
#VU53201 - Resource Management Errors
CVE-2021-29471
CWE-399
No
No
1.33.2 12.05.2021 SB2021051229
SB2021052516
SB2021071802
and 1 more
#VU51007 - Improper input validation
CVE-2021-21274
CWE-20 Low
No
No
1.25.0 01.03.2021 SB2021030111
SB2021071802
SB2021072328
#VU51006 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-21273
CWE-601 Medium
No
No
1.25.0 01.03.2021 SB2021030111
SB2021071802
SB2021072328
#VU48685 - Improper input validation
CVE-2020-26890
CWE-20 Medium
No
No
1.20.0 24.11.2020 SB2020112702
SB2020112703
SB2020112717
and 2 more
#VU26356 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10109
CWE-444 Medium
No
No
1.12.0 24.03.2020 SB2020031234
SB2020032419
SB2020043028
and 8 more
#VU26355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10108
CWE-444 Medium
No
No
1.12.0 24.03.2020 SB2020031234
SB2020032419
SB2020043012
and 11 more
#VU24173 - Improper Authorization
CWE-285 Low
No
No
1.7.1 09.01.2020 SB2019121925
#VU23098 - Improper Authentication
CWE-287 Medium
No
No
1.6.1 29.11.2019 SB2019112906
#VU37030 - Improper input validation
CVE-2018-12423
CWE-20 Medium
No
No
0.31.2 14.06.2018 SB2018061414
SB2023051777
#VU38294 - Memory corruption
CVE-2017-14398
CWE-119 Low
No
No
- 13.09.2017 SB2017080206
#VU38607 - Improper input validation
CVE-2017-9769
CWE-20 High
Available
No
- 02.08.2017 SB2017080206


Showing elements 41 - 60 out of 63