Matrix Homeserver Vulnerability in Synapse Version Prior to 1.120.1
CVE-2024-52815

Currently unrated

Key Information:

Vendor

Element

Status
Synapse
Vendor
CVE Published:
3 December 2024

What is CVE-2024-52815?

The Synapse Matrix homeserver is susceptible to a vulnerability where it fails to properly validate invites received through federation. This oversight allows a malicious server to craft and send invalid invites, subsequently disrupting the affected user's synchronization functionality within the application. The release of Synapse version 1.120.1 addresses this weakness by rejecting such malformed invites, thereby restoring proper sync capabilities for impacted users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/element-hq/synapse/security/advisories...

Timeline

  • Vulnerability published

JSON
.