VDB

CVE-2023-45129

CVE-2023-45129 PUBLISHED CVSS 6.900000095367432 MEDIUM

matrix-synapse vulnerable to denial of service due to malicious server ACL events

EPSS 1.39% · 72.1th percentile

Risk Scores

CVSS 4.0
6.900000095367432
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
1.39%
72.1th percentile

Affected Products

VendorProductVersions
fedoraprojectfedora37, 38
PyPImatrix-synapse0
matrixsynapse0
matrix-orgsynapse< 1.94.0

Timeline

  • Sep 26, 2023 Fix PR Merged
  • Oct 10, 2023 CVE Published
  • Oct 11, 2023 EPSS Score
  • Nov 12, 2023 EPSS Score
  • Dec 14, 2023 EPSS Score
  • Feb 17, 2024 EPSS Score
  • Mar 20, 2024 EPSS Score
  • Apr 21, 2024 EPSS Score
  • May 23, 2024 EPSS Score
  • Jun 25, 2024 EPSS Score
  • Jul 27, 2024 EPSS Score
  • Sep 24, 2024 CVE Updated

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›