Lucene search
K

3 matches found

Github Security Blog
Github Security Blog
added 2022/08/30 7:54 p.m.27 views

gomatrixserverlib and Dendrite vulnerable to incorrect parsing of the event default power level in event auth

Impact The power level parsing within gomatrixserverlib was failing to parse the "eventsdefault" key of the m.room.powerlevels event, defaulting the event default power level to zero in all cases. In rooms where the "eventsdefault" power level had been changed, this could result in events either...

8.8CVSS8.3AI score0.00623EPSS
Exploits0References6Affected Software2
OSV
OSV
added 2022/08/30 7:54 p.m.14 views

GHSA-GRVV-H2F9-7V9C gomatrixserverlib and Dendrite vulnerable to incorrect parsing of the event default power level in event auth

Impact The power level parsing within gomatrixserverlib was failing to parse the "eventsdefault" key of the m.room.powerlevels event, defaulting the event default power level to zero in all cases. In rooms where the "eventsdefault" power level had been changed, this could result in events either...

5CVSS6.6AI score0.00623EPSS
Exploits0References6
FreeBSD
FreeBSD
added 2022/08/15 12:0 a.m.23 views

dendrite -- Incorrect parsing of the event default power level in event auth

Dendrite team reports: The power level parsing within gomatrixserverlib was failing to parse the "eventsdefault" key of the m.room.powerlevels event, defaulting the event default power level to zero in all cases. In rooms where the "eventsdefault" power level had been changed, this could result i...

8.8CVSS3.2AI score0.00623EPSS
Exploits0References1
Rows per page
Query Builder