CVE:CVE-2021-41281
CNNVD:CNNVD-202111-2047
synapse是一个应用程序。用于开放式联合即时消息和VoIP
Synapse package 1.47.1之前版本存在路径遍历漏洞，攻击者可利用该漏洞绕过身份验证过程，从远程服务器下载文件到任意目录中。
solution:Upgrade matrix synapse to a higher version than 1.47.1,and avoid the version (,1.47.1); Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35