Lucene search

K
osvGoogleOSV:GHSA-V8WM-G9F2-XJV4
HistoryMay 13, 2022 - 1:49 a.m.

Matrix Synapse Security Filtering Flaw

2022-05-1301:49:32
Google
osv.dev
9
matrix synapse
security filtering
flaw
federation api

EPSS

0.002

Percentile

51.7%

The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where event visibility rules were not applied correctly.