Synapse is an open-source Matrix homeserver Prior to versions 1.95.1 and 1.96.0rc1, cached device information of remote users can be queried from Synapse. This can be used to enumerate the remote users known to a homeserver. System administrators are encouraged to upgrade to Synapse 1.95.1 or 1.96.0rc1 to receive a patch. As a workaround, the `federation_domain_whitelist` can be used to limit federation traffic with a homeserver.
References
Configurations
History
13 Feb 2025, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Synapse is an open-source Matrix homeserver Prior to versions 1.95.1 and 1.96.0rc1, cached device information of remote users can be queried from Synapse. This can be used to enumerate the remote users known to a homeserver. System administrators are encouraged to upgrade to Synapse 1.95.1 or 1.96.0rc1 to receive a patch. As a workaround, the `federation_domain_whitelist` can be used to limit federation traffic with a homeserver. |
21 Nov 2024, 08:24
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/matrix-org/synapse/commit/daec55e1fe120c564240c5386e77941372bf458f - Patch | |
| References | () https://github.com/matrix-org/synapse/security/advisories/GHSA-mp92-3jfm-3575 - Vendor Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2IDEEZMFJBDLTFHQUTZRJJNCOZGQ2ZVS/ - Mailing List | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VH3RNC5ZPQZ4OKPSL4E6BBJSZOQLGDEY/ - Mailing List | |
| References | () https://security.gentoo.org/glsa/202401-12 - |
28 Dec 2023, 16:13
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-31 17:15
Updated : 2025-02-13 17:17
NVD link : CVE-2023-43796
Mitre link : CVE-2023-43796
CVE.ORG link : CVE-2023-43796
JSON object : View
Products Affected
fedoraproject
- fedora
matrix
- synapse
CWE