CVE:CVE-2021-21333
CNNVD:CNNVD-202103-1528
Matrix Synapse是英国Matrix基金会的一款矩阵管理服务器的实现。
Matrix Synapse 1.27.0 版本之前存在跨站脚本漏洞，该漏洞允许攻击者可利用该漏洞在电子邮件中插入伪造内容。
solution:Upgrade matrix synapse to a higher version than 1.27.0,and avoid the version (,1.27.0); Upgrade fedoraproject fedora to a higher version than 34,and avoid the version 34