High
CVE-2022-39335
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 45
Reset filters
High
CVE-2022-31152
Denial of service due to incorrect application of event authorization rules
High
CVE-2022-31052
URL previews of unusual or maliciously-crafted pages can crash Synapse media repositories or Synapse monoliths
High
CVE-2019-11842
matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG
High
CVE-2019-5885
Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers t
High
CVE-2021-41281
Path traversal in Matrix Synapse
Low
CVE-2021-39164
Improper authorisation of members discloses room membership to non-members
Low
CVE-2021-39163
Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
Medium
ghsa-7h5v-85w9-pq6c
Denial of service (via resource exhaustion) due to improper input validation in third-party identifier endpoint
Medium
CVE-2021-29471
Denial of service attack via push rule patterns in matrix-synapse
Medium
CVE-2021-21393
Denial of service (via resource exhaustion) due to improper input validation on groups/communities endpoints
High
CVE-2021-21392
Open redirect via transitional IPv6 addresses on dual-stack networks
Medium
CVE-2021-21394
Denial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints
Medium
CVE-2021-21333
HTML injection in email and account expiry notifications
Medium
CVE-2021-21332
Cross-site scripting (XSS) vulnerability in the password reset endpoint
Medium
CVE-2021-21274
Denial of service attack via .well-known lookups
Medium
CVE-2021-21273
Open redirects on some federation and push requests
High
CVE-2020-26257
Denial of service attack via incorrect parameters in Matrix Synapse
High
CVE-2020-26890
Denial of service attack due to invalid JSON
Medium
CVE-2020-26891
Cross-site scripting (XSS) vulnerability in the fallback authentication endpoint
High
CVE-2019-18835
Improper Verification of Cryptographic Signature in matrix-synapse
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.