Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-30355

Опубликовано: 27 мар. 2025
Источник: nvd
CVSS3: 7.1
CVSS3: 7.5
EPSS Низкий

Описание

Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild and has been fixed in Synapse v1.127.1. No known workarounds are available.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:matrix:synapse:*:*:*:*:*:*:*:*
Версия до 1.127.1 (исключая)

EPSS

Процентиль: 92%
0.0754
Низкий

7.1 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-20
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 7.1
ubuntu
11 месяцев назад

Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild and has been fixed in Synapse v1.127.1. No known workarounds are available.

CVSS3: 7.1
debian
11 месяцев назад

Synapse is an open source Matrix homeserver implementation. A maliciou ...

CVSS3: 7.1
github
11 месяцев назад

Synapse vulnerable to federation denial of service via malformed events

EPSS

Процентиль: 92%
0.0754
Низкий

7.1 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-20
NVD-CWE-noinfo