PT-2020-16533

Name of the Vulnerable Software and Affected Versions Matrix Synapse versions prior to 1.21.0 Description The issue is due to unsafe interpolation of the session GET parameter in the AuthRestServlet, allowing a remote attacker to execute a cross-site scripting XSS attack. This can be done by...