Lucene search
GoogleOSV:CVE-2018-12291HistoryJun 13, 2018 - 2:29 p.m.
CVE-2018-12291
2018-06-1314:29:00
Google
osv.dev
4
0.001 Low
EPSS
Percentile
48.8%
The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where event visibility rules were not applied correctly.
| CPE | Name | Operator | Version |
|---|---|---|---|
| synapse | eq | 0.27.3-rc1 | |
| synapse | eq | 0.8.1 | |
| synapse | eq | 0.17.3 | |
| synapse | eq | 0.8.1-r4 | |
| synapse | eq | 0.4.2 | |
| synapse | eq | 0.16.0-rc1 | |
| synapse | eq | 0.18.0-rc1 | |
| synapse | eq | 0.13.1 | |
| synapse | eq | 0.16.1-rc1 | |
| synapse | eq | 0.18.7-rc1 |
Related
fedora
fedora
[SECURITY] Fedora 28 Update: matrix-synapse-0.31.2-1.fc28
2018-06-23 20:48:50
[SECURITY] Fedora 28 Update: python-prometheus_client-0.2.0-1.fc28
2018-06-23 20:48:50
[SECURITY] Fedora 28 Update: matrix-synapse-0.34.0.1-2.fc28
2019-01-23 01:46:10
ubuntucve
ubuntucve
CVE-2018-12291
2018-06-13 00:00:00
openvas
openvas
Fedora Update for matrix-synapse FEDORA-2018-6e759af8fb
2018-06-24 00:00:00
openSUSE: Security Advisory for matrix-synapse (openSUSE-SU-2018:1767-1)
2018-10-26 00:00:00
Fedora Update for python-prometheus_client FEDORA-2018-6e759af8fb
2018-06-24 00:00:00
prion
prion
Design/Logic Flaw
2018-06-13 14:29:00
nvd
nvd
CVE-2018-12291
2018-06-13 14:29:00
nessus
nessus
openSUSE Security Update : matrix-synapse (openSUSE-2019-475)
2019-03-27 00:00:00
Fedora 28 : matrix-synapse / python-prometheus_client (2018-6e759af8fb)
2019-01-03 00:00:00
openSUSE Security Update : matrix-synapse (openSUSE-2018-654)
2018-06-21 00:00:00
cvelist
cvelist
CVE-2018-12291
2022-10-03 16:22:07
debiancve
debiancve
CVE-2018-12291
2022-10-03 16:22:07
cve
cve
CVE-2018-12291
2022-10-03 16:22:07
suse
suse
Security update for matrix-synapse (moderate)
2018-06-20 21:10:38
github
github
Matrix Synapse Security Filtering Flaw
2022-05-13 01:49:32
osv
osv
Matrix Synapse Security Filtering Flaw
2022-05-13 01:49:32
matrix-synapse vulnerabilities
2023-05-16 07:45:08
ubuntu
ubuntu
Synapse vulnerabilities
2023-05-16 00:00:00