Lucene search
Veracode Vulnerability DatabaseVERACODE:31889HistorySep 01, 2021 - 3:33 a.m.
Privilege Escalation
2021-09-0103:33:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
privilege escalation
room id
private room
group/community features
information disclosure
EPSS
0.001
Percentile
49.7%
matrix-synapse is vulnerable to privilege escalation. Any unauthorized user who knows Room ID of a private room can disclose a private room’s name, avatar, topic, and number of members through Group/Community features.
References
github.com/matrix-org/synapse/commit/cb35df940a
github.com/matrix-org/synapse/pull/10723
github.com/matrix-org/synapse/releases/tag/v1.41.1
github.com/matrix-org/synapse/security/advisories/GHSA-jj53-8fmw-f2w2
lists.fedoraproject.org/archives/list/[email protected]/message/2VHDEPCZ22GJFMZCWA2XZAGPOEV72POF/
lists.fedoraproject.org/archives/list/[email protected]/message/PXT7ID7DNBRN2TVTETU3SYQHJKEG6PXN/
Related
github
github
osv
osv
Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
2021-09-01 18:25:44
CVE-2021-39163
2021-08-31 16:15:07
PYSEC-2021-424
2021-08-31 16:15:00
prion
prion
Design/Logic Flaw
2021-08-31 16:15:00
ubuntucve
ubuntucve
CVE-2021-39163
2021-08-31 00:00:00
cnvd
cnvd
Matrix Information Disclosure Vulnerability (CNVD-2021-70122)
2021-09-02 00:00:00
alpinelinux
alpinelinux
CVE-2021-39163
2021-08-31 16:15:07
cvelist
cvelist
nvd
nvd
CVE-2021-39163
2021-08-31 16:15:07
cve
cve
CVE-2021-39163
2021-08-31 16:15:07
debiancve
debiancve
CVE-2021-39163
2021-08-31 16:15:07
fedora
fedora
[SECURITY] Fedora 34 Update: matrix-synapse-1.41.1-1.fc34
2021-09-08 15:07:22
[SECURITY] Fedora 35 Update: matrix-synapse-1.41.1-1.fc35
2021-09-24 20:41:56
nessus
nessus
openvas
openvas
Fedora: Security Advisory for matrix-synapse (FEDORA-2021-2e8ed15b14)
2021-09-09 00:00:00
Fedora: Security Advisory for matrix-synapse (FEDORA-2021-f12fdca1bf)
2021-10-02 00:00:00
freebsd
freebsd
py-matrix-synapse -- several vulnerabilities
2021-08-31 00:00:00