{"metadata": {"vulnerability": "CVE-2021-21274", "count": 22, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 15}}, "data": [{"timestamp": "2020-12-22T00:00:00Z", "date_only": false, "value": "2020-12-22T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-21274", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-02-26T00:00:00Z", "date_only": true, "value": "2021-02-26", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-21274", "record": "GSD-2021-21274", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2021-02-26T17:25:16Z", "date_only": false, "value": "2021-02-26T17:25:16.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-21274", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-02-26T18:15:00Z", "date_only": false, "value": "2021-02-26T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2HWX-MJRM-V3G8", "record": "GHSA-2HWX-MJRM-V3G8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-02-26T18:15:00Z", "date_only": false, "value": "2021-02-26T18:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-21274", "record": "UBUNTU-CVE-2021-21274", "field": "published"}, {"timestamp": "2021-02-26T18:15:00Z", "date_only": false, "value": "2021-02-26T18:15:00Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2021-132", "record": "PYSEC-2021-132", "field": "published"}, {"timestamp": "2021-02-26T18:15:00Z", "date_only": false, "value": "2021-02-26T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-21274", "record": "GSD-2021-21274", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-02-26T18:15:12.237Z", "date_only": false, "value": "2021-02-26T18:15:12.237", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-21274", "record": "FKIE_CVE-2021-21274", "field": "published"}, {"timestamp": "2021-02-26T20:39:24Z", "date_only": false, "value": "2021-02-26T20:39:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/24240", "record": "CVE-2021-21274", "field": "creation_timestamp", "uuid": "b436584b-11fb-4d03-8d18-fea530f4247b", "content": "\u203c CVE-2021-21274 \u203c\n\nSynapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, a malicious homeserver could redirect requests to their .well-known file to a large file. This can lead to a denial of service attack where homeservers will consume significantly more resources when requesting the .well-known file of a malicious homeserver. This affects any server which accepts federation requests from untrusted servers. Issue is resolved in version 1.25.0. As a workaround the `federation_domain_whitelist` setting can be used to restrict the homeservers communicated with over federation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/24240"}, {"timestamp": "2021-03-01T19:34:54Z", "date_only": false, "value": "2021-03-01T19:34:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2HWX-MJRM-V3G8", "record": "GHSA-2HWX-MJRM-V3G8", "field": "published"}, {"timestamp": "2021-03-02T00:00:00Z", "date_only": true, "value": "2021-03-02", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-15493", "record": "CNVD-2021-15493", "field": "submitTime"}, {"timestamp": "2021-03-09T00:00:00Z", "date_only": true, "value": "2021-03-09", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-15493", "record": "CNVD-2021-15493", "field": "openTime"}, {"timestamp": "2021-08-02T02:06:23Z", "date_only": false, "value": "2021-08-02T02:06:23.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2021-21274", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-08-27T03:22:06.616Z", "date_only": false, "value": "2021-08-27T03:22:06.616674Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2021-132", "record": "PYSEC-2021-132", "field": "modified"}, {"timestamp": "2022-10-24T00:00:00Z", "date_only": true, "value": "2022-10-24", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-21274", "record": "GSD-2021-21274", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2022-10-24T20:49:00Z", "date_only": false, "value": "2022-10-24T20:49Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-21274", "record": "GSD-2021-21274", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:23:10.308Z", "date_only": false, "value": "2023-12-13T01:23:10.308707Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-21274", "record": "GSD-2021-21274", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T18:09:15.070Z", "date_only": false, "value": "2024-08-03T18:09:15.070Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-21274", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T18:09:15.070Z", "date_only": false, "value": "2024-08-03T18:09:15.070Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-21274", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-30T20:23:54Z", "date_only": false, "value": "2024-09-30T20:23:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2HWX-MJRM-V3G8", "record": "GHSA-2HWX-MJRM-V3G8", "field": "modified"}, {"timestamp": "2025-09-08T16:46:57Z", "date_only": false, "value": "2025-09-08T16:46:57Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-21274", "record": "UBUNTU-CVE-2021-21274", "field": "modified"}, {"timestamp": "2026-06-17T03:35:10.330Z", "date_only": false, "value": "2026-06-17T03:35:10.330", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-21274", "record": "FKIE_CVE-2021-21274", "field": "lastModified"}]}