PyPI: matrix-synapse
CVE-2024-37303
Safety vulnerability ID: SFTY-20241203-39614
Safety legacy ID: pyup.io-74425
Affected versions of Synapse are vulnerable to Missing Authentication for Critical Function (CWE-306). This flaw allows unauthenticated remote users to download and cache media on the local repository, making such content accessible without authentication. The attack is executed via unauthenticated media download endpoints, enabling remote exploitation without credentials. To mitigate this issue, upgrade to Synapse version 1.106 or later, which requires authentication for media downloads. Additionally, server operators can apply stricter IP-based rate limits as a temporary workaround.
Overview
Synapse's unauthenticated writes to the media repository allow planting of problematic content
Advisory
Affected versions of Synapse are vulnerable to Missing Authentication for Critical Function (CWE-306). This flaw allows unauthenticated remote users to download and cache media on the local repository, making such content accessible without authentication. The attack is executed via unauthenticated media download endpoints, enabling remote exploitation without credentials. To mitigate this issue, upgrade to Synapse version 1.106 or later, which requires authentication for media downloads. Additionally, server operators can apply stricter IP-based rate limits as a temporary workaround.
How to Fix
Mitigation and Workarounds
---
Vulnerable Functions
Functions linked to known vulnerabilities.
References
- https://getsafety.com/vulnerabilities/SFTY-20241203-39614/CVE-2024-37303
- https://github.com/element-hq/synapse/security/advisories/GHSA-gjgr-7834-rhxr
- https://nvd.nist.gov/vuln/detail/CVE-2024-37303
- https://github.com/matrix-org/matrix-spec-proposals/pull/3916
- https://github.com/pypa/advisory-database/tree/main/vulns/matrix-synapse/PYSEC-2024-287.yaml
- https://github.com/advisories/GHSA-gjgr-7834-rhxr
Verified by Safety
Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.
Learn more