Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-30355

Опубликовано: 27 мар. 2025
Источник: nvd
CVSS3: 7.1
CVSS3: 7.5
EPSS Низкий

Описание

Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild and has been fixed in Synapse v1.127.1. No known workarounds are available.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:matrix:synapse:*:*:*:*:*:*:*:*
Версия до 1.127.1 (исключая)

EPSS

Процентиль: 66%
0.01181
Низкий

7.1 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-20
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 7.1
ubuntu
больше 1 года назад

Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild and has been fixed in Synapse v1.127.1. No known workarounds are available.

CVSS3: 7.1
debian
больше 1 года назад

Synapse is an open source Matrix homeserver implementation. A maliciou ...

CVSS3: 7.1
github
больше 1 года назад

Synapse vulnerable to federation denial of service via malformed events

EPSS

Процентиль: 66%
0.01181
Низкий

7.1 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-20
NVD-CWE-noinfo