Vulnerabilities > Matrix

DATE CVE VULNERABILITY TITLE RISK
2021-06-16 CVE-2021-32659 Missing Authentication for Critical Function vulnerability in Matrix Matrix-Appservice-Bridge
Matrix-appservice-bridge is the bridging service for the Matrix communication program's application services.
network
matrix CWE-306
3.5
2021-06-16 CVE-2021-34813 Out-of-bounds Write vulnerability in Matrix OLM
Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve an Olm encrypted room key backup from the homeserver) because olm_pk_decrypt has a stack-based buffer overflow.
network
low complexity
matrix CWE-787
7.5
2021-05-11 CVE-2021-29471 Insufficient Entropy vulnerability in multiple products
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).
network
low complexity
matrix fedoraproject CWE-331
5.0
2021-04-15 CVE-2021-29432 Unspecified vulnerability in Matrix Sydent
Sydent is a reference matrix identity server.
network
matrix
3.5
2021-04-15 CVE-2021-29430 Allocation of Resources Without Limits or Throttling vulnerability in Matrix Sydent
Sydent is a reference Matrix identity server.
network
low complexity
matrix CWE-770
5.0
2021-04-15 CVE-2021-29433 Improper Input Validation vulnerability in Matrix Sydent
Sydent is a reference Matrix identity server.
network
low complexity
matrix CWE-20
4.0
2021-04-12 CVE-2021-21393 Improper Input Validation vulnerability in multiple products
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).
4.3
2021-04-12 CVE-2021-21392 Open Redirect vulnerability in multiple products
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).
4.9
2021-04-12 CVE-2021-21394 Improper Input Validation vulnerability in multiple products
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).
network
low complexity
matrix fedoraproject CWE-20
4.0
2021-03-26 CVE-2021-21333 Cross-site Scripting vulnerability in multiple products
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).
network
high complexity
matrix fedoraproject CWE-79
6.1