Lucene search

K
osvGoogleOSV:PYSEC-2019-187
HistoryMar 21, 2019 - 4:01 p.m.

PYSEC-2019-187

2019-03-2116:01:00
Google
osv.dev
4

0.006 Low

EPSS

Percentile

79.2%

Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users.