CVE-2025-30355 PoC — Element Synapse 输入验证错误漏洞

Source

https://github.com/ui-bootstrap/CVE-2025-30355

Associated Vulnerability

Title:Element Synapse 输入验证错误漏洞 (CVE-2025-30355)
Description:Element Synapse是Element开源的一个开源 Matrix 家庭服务器实现。 Element Synapse 1.127.0及之前版本存在输入验证错误漏洞，该漏洞源于恶意服务器可阻止与其他服务器联合。

Description

A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild.

Readme

# CVE-2025-30355
A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild.

File Snapshot


 [4.0K]  /data/pocs/5a626587378e853f569d9dbb1092140bb133f823
├── [1.4K]  CVE-2025-30355.py
└── [ 199]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!