Описание
Synapse is an open-source Matrix homeserver. The Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected. This vulnerability is fixed in 1.120.1.
| Релиз | Статус | Примечание |
|---|---|---|
| esm-apps/bionic | not-affected | 0.24.0+dfsg-1ubuntu0.1~esm1 |
| esm-apps/focal | not-affected | 1.11.0-1 |
| esm-apps/jammy | not-affected | 1.53.0-1 |
| esm-apps/noble | not-affected | 1.100.0-1ubuntu1 |
| focal | not-affected | 1.11.0-1 |
| jammy | not-affected | 1.53.0-1 |
| noble | not-affected | 1.100.0-1ubuntu1 |
| oracular | not-affected | 1.100.0-1ubuntu1 |
| upstream | released | 1.120.1 |
Показывать по
4.3 Medium
CVSS3
Связанные уязвимости
Synapse is an open-source Matrix homeserver. The Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected. This vulnerability is fixed in 1.120.1.
Synapse is an open-source Matrix homeserver. The Sliding Sync feature ...
Synapse Matrix has a partial room state leak via Sliding Sync
4.3 Medium
CVSS3