Log in Start free

Vulnerability · Published Sep 26, 2023 · Assigned by GitHub_M

CVE-2023-42453Improper validation of receipts allows forged read receipts in matrix synapse

Low 3.1

In plain English

A low-severity security flaw in synapse from matrix-org. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)3.1Low
Exploit odds (30 days)0.8%top 44.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Users were able to forge read receipts for any event (if they knew the room ID and event ID). Note that the users were not able to view the events, but simply mark it as read. This could be confusing as clients will show the event as read by the user, even if they are not in the room. This issue has been patched in version 1.93.0. Users are advised to upgrade. There are no known workarounds for this issue.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20synapse1.93.0-r0ALPINE-CVE-2023-42453
Alpine:v3.21synapse1.93.0-r0ALPINE-CVE-2023-42453
Alpine:v3.22synapse1.93.0-r0ALPINE-CVE-2023-42453
Alpine:v3.23synapse1.93.0-r0ALPINE-CVE-2023-42453
Alpine:v3.24synapse1.93.0-r0ALPINE-CVE-2023-42453
Debian:14matrix-synapse1.93.0-1DEBIAN-CVE-2023-42453
PyPImatrix-synapse1.93.0GHSA-7565-cq32-vx2x
PyPImatrix-synapse1.93.0PYSEC-2023-180

Affected products (as reported)

VendorProductVersions
matrix-org synapse >= 0.34.0, < 1.93.0

Weakness: CWE-285 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

References