Skip to content
OpenAdvisories

Product · Matrix

synapse

24 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2021-41281

    Path traversal in Matrix Synapse

    Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version 1.47.1, Synapse instances with the media repository enabled can be tricked into downloading a file from a remote server into an arbitrary directory. No authentication is…

    Matrix synapse matrix-synapse matrix-synapse Ubuntu Alpine PyPI