Alta
CVE-2022-39335
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 45
Restablecer filtros
Alta
CVE-2022-31152
Denial of service due to incorrect application of event authorization rules
Alta
CVE-2022-31052
URL previews of unusual or maliciously-crafted pages can crash Synapse media repositories or Synapse monoliths
Alta
CVE-2019-11842
matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG
Alta
CVE-2019-5885
Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers t
Alta
CVE-2021-41281
Path traversal in Matrix Synapse
Baja
CVE-2021-39164
Improper authorisation of members discloses room membership to non-members
Baja
CVE-2021-39163
Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
Media
ghsa-7h5v-85w9-pq6c
Denial of service (via resource exhaustion) due to improper input validation in third-party identifier endpoint
Media
CVE-2021-29471
Denial of service attack via push rule patterns in matrix-synapse
Media
CVE-2021-21393
Denial of service (via resource exhaustion) due to improper input validation on groups/communities endpoints
Alta
CVE-2021-21392
Open redirect via transitional IPv6 addresses on dual-stack networks
Media
CVE-2021-21394
Denial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints
Media
CVE-2021-21333
HTML injection in email and account expiry notifications
Media
CVE-2021-21332
Cross-site scripting (XSS) vulnerability in the password reset endpoint
Media
CVE-2021-21274
Denial of service attack via .well-known lookups
Media
CVE-2021-21273
Open redirects on some federation and push requests
Alta
CVE-2020-26257
Denial of service attack via incorrect parameters in Matrix Synapse
Alta
CVE-2020-26890
Denial of service attack due to invalid JSON
Media
CVE-2020-26891
Cross-site scripting (XSS) vulnerability in the fallback authentication endpoint
Alta
CVE-2019-18835
Improper Verification of Cryptographic Signature in matrix-synapse
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.