Alpine/synapse: medium 4.3
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Users were able to forge read receipts for any event (if they knew the room ID and event ID). Note that
Action: Upgrade synapse to 1.93.0-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.34.0 | 1.93.0-r0 | - |
Fixed versions
| 1.93.0-r0 |
Sources
- osv: ALPINE-CVE-2023-42453#Alpine:v3.20/synapse
- https://security.alpinelinux.org/vuln/CVE-2023-42453
published · modified · JSON