Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
fedoraFedoraFEDORA:A953C3719316
HistoryDec 09, 2021 - 1:35 a.m.

[SECURITY] Fedora 34 Update: matrix-synapse-1.48.0-1.fc34

2021-12-0901:35:27
lists.fedoraproject.org
8
matrix
synapse
instant messaging
voip
open
federated
homeserver
implementation
python
twisted
specification
ecosystem
unix

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

50.2%

JSON

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference “homeserver” implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in the context of a coded base and let you run your own homeserver and generally help bootstrap the ecosystem.

OSVersionArchitecturePackageVersionFilename
Fedora34anymatrix-synapse< 1.48.0UNKNOWN

Related

cnvd 1
osv 4
cvelist 1
veracode 1
fedora 1
freebsd 1
openvas 2
cve 1
alpinelinux 1
prion 1
ubuntucve 1
debiancve 1
nvd 1
github 1
cnvd
cnvd
Synapse path traversal vulnerability
2021-11-25 00:00:00
osv
osv
CVE-2021-41281
2021-11-23 20:15:11
Path traversal in Matrix Synapse
2021-11-23 21:58:56
matrix-synapse-1.47.1-1.1 on GA media
2024-06-15 00:00:00
cvelist
cvelist
CVE-2021-41281 Path traversal in Matrix Synapse
2021-11-23 19:15:18
veracode
veracode
Path Traversal
2021-11-24 06:32:40
fedora
fedora
[SECURITY] Fedora 35 Update: matrix-synapse-1.48.0-1.fc35
2021-12-09 01:12:46
freebsd
freebsd
py-matrix-synapse -- several vulnerabilities
2021-11-18 00:00:00
openvas
openvas
Fedora: Security Advisory for matrix-synapse (FEDORA-2021-9758549fce)
2021-12-09 00:00:00
Fedora: Security Advisory for matrix-synapse (FEDORA-2021-2f9dcdbace)
2021-12-09 00:00:00
cve
cve
CVE-2021-41281
2021-11-23 20:15:11
alpinelinux
alpinelinux
CVE-2021-41281
2021-11-23 20:15:11
prion
prion
Authentication flaw
2021-11-23 20:15:00
ubuntucve
ubuntucve
CVE-2021-41281
2021-11-23 00:00:00
debiancve
debiancve
CVE-2021-41281
2021-11-23 20:15:11
nvd
nvd
CVE-2021-41281
2021-11-23 20:15:11
github
github
Path traversal in Matrix Synapse
2021-11-23 21:58:56

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

50.2%

JSON
Related for FEDORA:A953C3719316
cnvd1osv4cvelist1veracode1fedora1freebsd1openvas2cve1alpinelinux1prion1ubuntucve1debiancve1nvd1github1