Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Synapse is an open-source Matrix homeserver. Synapse versions before 1.120.1 fail to properly validate invites received over federation. This vulnerability allows a malicious server to send a specially crafted invite that disrupts the invited user's /sync functionality. Synapse 1.120.1 rejects such invalid invites received over federation and restores the ability to sync for affected users.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🟠 Kirby CMS, Information Exposure via REST API, #CVE-2024-52815 (Medium) -DC-Sep2026-2056 https://dailycve.com/kirby-cms-information-exposure-via-rest-api-cve-2024-52815-medium-dc-sep2026-2056/
Post summary
A Medium‑severity information exposure vulnerability (CVE-2024-52815) impacting Kirby CMS through its REST API was disclosed via a DailyCVE article, with no exploitation, PoC, or patch details provided in the snippet.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | matrix | synapse | - | - | - |