Known vulnerabilities in Synapse - page 3

Vendor: Matrix.org
Software: Synapse
Software CPE: cpe:2.3:a:matrix_org:synapse:*:*:*:*:*:*:*:*
Total vulnerabilities: 63
Public exploits: 2
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Synapse Synapse is affected by 63 known vulnerabilities: 1 critical, 4 high, 31 medium, 26 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76260 - Improper Verification of Cryptographic Signature
CVE-2018-16515
CWE-347 High
No
No
0.33.3.1 17.05.2023 SB2018091858
SB2023051777
SB2018090645
and 1 more
#VU76259 - Key Management Errors
CVE-2019-5885
CWE-320 Medium
No
No
0.34.0.1 17.05.2023 SB2019032141
SB2023051777
SB2019012435
and 2 more
#VU76258 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2019-11842
CWE-338 Medium
No
No
0.99.3.1 17.05.2023 SB2019050925
SB2023051777
#VU129603 - Improper input validation
CVE-2021-21393
CWE-20 Medium
No
No
1.28.0 12.04.2021 SB2021041242
SB2021071802
SB2021072328
#VU129602 - Improper input validation
CVE-2021-21394
CWE-20 Medium
No
No
1.28.0 12.04.2021 SB2021041242
SB2021071802
SB2021072328
#VU129607 - Improper Access Control
CVE-2021-21392
CWE-284 Medium
No
No
1.28.0 12.04.2021 SB2021041242
SB2021071802
SB2021072328
#VU129604 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21333
CWE-79 Low
No
No
1.27.0 25.03.2021 SB2021032548
SB2021071802
SB2021072328
#VU129608 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21332
CWE-79 Medium
No
No
1.27.0 25.03.2021 SB2021032548
SB2021071802
SB2021072328
#VU51007 - Improper input validation
CVE-2021-21274
CWE-20 Low
No
No
1.25.0 01.03.2021 SB2021030111
SB2021071802
SB2021072328
#VU51006 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-21273
CWE-601 Medium
No
No
1.25.0 01.03.2021 SB2021030111
SB2021071802
SB2021072328
#VU49037 - Resource exhaustion
CVE-2020-26257
CWE-400 Medium
No
No
1.23.1 16.12.2020 SB2020121621
SB2020121032
SB2020121033
and 1 more
#VU48685 - Improper input validation
CVE-2020-26890
CWE-20 Medium
No
No
1.20.0 24.11.2020 SB2020112702
SB2020112703
SB2020112717
and 2 more
#VU47739 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26891
CWE-79 Low
No
No
1.21.0 19.10.2020 SB2020102036
SB2020110308
SB2020101618
#VU26356 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10109
CWE-444 Medium
No
No
1.12.0 24.03.2020 SB2020031234
SB2020032419
SB2020043028
and 8 more
#VU26355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10108
CWE-444 Medium
No
No
1.12.0 24.03.2020 SB2020031234
SB2020032419
SB2020043012
and 11 more
#VU24173 - Improper Authorization
CWE-285 Low
No
No
1.7.1 09.01.2020 SB2019121925
#VU23098 - Improper Authentication
CWE-287 Medium
No
No
1.6.1 29.11.2019 SB2019112906
#VU22754 - Insufficient Verification of Data Authenticity
CVE-2019-18835
CWE-345 High
No
No
1.5.0 rc2 13.11.2019 SB2019111339
SB2023051777
#VU14207 - Permissions, Privileges, and Access Controls
CVE-2018-12291
CWE-264 Low
No
No
0.31.1 06.08.2018 SB2018080711
SB2018062021
SB2023051777
and 1 more
#VU37030 - Improper input validation
CVE-2018-12423
CWE-20 Medium
No
No
0.31.2 14.06.2018 SB2018061414
SB2023051777


Showing elements 41 - 60 out of 63