Lucene search

K
osvGoogleOSV:CVE-2019-18835
HistoryNov 08, 2019 - 12:15 a.m.

CVE-2019-18835

2019-11-0800:15:10
Google
osv.dev
2

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join, /send_leave, and /invite may not be correctly signed, or may not come from the expected servers.

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%