All 35 CVE vulnerabilities found in synapse, with AI-generated Chinese analysis, references, and POCs.
This page aggregates known security vulnerabilities associated with the Synapse product line, focusing on software weaknesses and tagged under the Synapse vendor identifier. The collection encompasses a wide spectrum of flaws including memory corruption, authentication bypasses, and logic errors discovered between the initial public release and the current stable version. Visitors can utilize this resource to track the vendor's official security advisories over time, analyze the prevalence and impact of specific weakness classes within the application architecture, or review the complete historical vulnerability record for the product. The data presented here is derived from public disclosures, security bulletins, and verified exploit reports to provide a comprehensive view of the security landscape surrounding Synapse. Users seeking to assess risk, plan remediation strategies, or understand the evolution of security issues in this software will find the chronological listing and detailed categorization essential for their analysis. All entries are curated to ensure accuracy and relevance, offering a centralized reference point for security professionals, developers, and system administrators managing Synapse deployments. This aggregation supports proactive defense by highlighting patterns in past incidents and facilitating informed decision-making regarding patch management and system hardening efforts.
Vendor: matrix-org
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2021-21333 | HTML injection in email and account expiry notifications CWE-74 | 6.1 | Medium | 2021-03-26 |
| CVE-2021-21332 | Cross-site scripting (XSS) vulnerability in the password reset endpoint CWE-79 | 6.9 | Medium | 2021-03-26 |
| CVE-2021-21273 | Open redirects on some federation and push requests CWE-601 | 3.1 | Low | 2021-02-26 |
| CVE-2021-21274 | Denial of service attack via .well-known lookups CWE-400 | 4.3 | Medium | 2021-02-26 |
| CVE-2020-26257 | Denial of service attack via incorrect parameters to federation APIs CWE-400 | 6.5 | Medium | 2020-12-09 |
All 35 known CVE vulnerabilities affecting synapse with full Chinese analysis, references, and POCs where available.