Опубликовано: 18 сент. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.5
CVSS3: 8.8
Описание
Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper transaction and event signature validation.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | ignored | end of life |
| devel | not-affected | 0.99.2-1 |
| disco | not-affected | 0.99.2-1 |
| eoan | not-affected | 0.99.2-1 |
| esm-apps/bionic | released | 0.24.0+dfsg-1ubuntu0.1~esm1 |
| esm-apps/focal | not-affected | 0.99.2-1 |
| esm-apps/jammy | not-affected | 0.99.2-1 |
| esm-infra-legacy/trusty | DNE | |
| focal | not-affected | 0.99.2-1 |
Показывать по
10
Ссылки на источники
EPSS
Процентиль: 75%
0.01538
Низкий
6.5 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
CVSS3: 8.8
nvd
около 8 лет назад
Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper transaction and event signature validation.
CVSS3: 8.8
debian
около 8 лет назад
Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events ...
CVSS3: 8.8
altlinux
около 8 лет назад
ALT-PU-2018-2390: package `matrix-synapse` update to version 0.33.5.1-alt1
EPSS
Процентиль: 75%
0.01538
Низкий
6.5 Medium
CVSS2
8.8 High
CVSS3