Search results

repeatedly calling /_matrix/client/r0/keys/upload DoSes federation

A-Device-List-TrackingTelling clients about other devices. Often related to E2EE.Telling clients about other devices. Often related to E2EE.

P4(OBSOLETE: use S- labels.) Okay backlog: will not schedule, will accept patches(OBSOLETE: use S- labels.) Okay backlog: will not schedule, will accept patches

S-MinorBlocks non-critical functionality, workarounds exist.Blocks non-critical functionality, workarounds exist.

Security

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Status: Open.

#3657 In matrix-org/synapse;

· richvdh opened on Aug 6, 2018

It is possible to set a stupidly long displayname

A-Membership

A-Validation500 (mostly) errors due to lack of event/parameter validation500 (mostly) errors due to lack of event/parameter validation

P4(OBSOLETE: use S- labels.) Okay backlog: will not schedule, will accept patches(OBSOLETE: use S- labels.) Okay backlog: will not schedule, will accept patches

S-TolerableMinor significance, cosmetic issues, low or no impact to users.Minor significance, cosmetic issues, low or no impact to users.

Security

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Status: Open.

#5079 In matrix-org/synapse;

· richvdh opened on Apr 18, 2019

Access tokens are not invalidated when credentials are invalidated via an external auth provider

Security

T-EnhancementNew features, changes in functionality, improvements in performance, or user-facing enhancements.New features, changes in functionality, improvements in performance, or user-facing enhancements.

z-p2(Deprecated Label)(Deprecated Label)

Status: Open.

#4158 In matrix-org/synapse;

· richvdh opened on Nov 7, 2018

.well-known lookups can be used to circumvent the IP address blacklist

S-MinorBlocks non-critical functionality, workarounds exist.Blocks non-critical functionality, workarounds exist.

Security

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Status: Open.

#5273 In matrix-org/synapse;

· richvdh opened on May 28, 2019

synapse blindly trusts X-Forwarded-For if x_forwarded option is enabled

S-MinorBlocks non-critical functionality, workarounds exist.Blocks non-critical functionality, workarounds exist.

Security

T-DefectBugs, crashes, hangs, security vulnerabilities, or other reported issues.Bugs, crashes, hangs, security vulnerabilities, or other reported issues.

Status: Open.

#9471 In matrix-org/synapse;

· richvdh opened on Feb 23, 2021