Lucene search
K

6 matches found

NVD
NVD
added 2022/08/19 9:15 p.m.11 views

CVE-2022-36009

gomatrixserverlib is a Go library for matrix protocol federation. Dendrite is a Matrix homeserver written in Go, an alternative to Synapse. The power level parsing within gomatrixserverlib was failing to parse the "eventsdefault" key of the m.room.powerlevels event, defaulting the event default...

8.8CVSS0.00623EPSS
Exploits0References3
OSV
OSV
added 2022/08/19 8:35 p.m.11 views

CVE-2022-36009 Incorrect parsing of access level in gomatrixserverlib and dendrite

gomatrixserverlib is a Go library for matrix protocol federation. Dendrite is a Matrix homeserver written in Go, an alternative to Synapse. The power level parsing within gomatrixserverlib was failing to parse the "eventsdefault" key of the m.room.powerlevels event, defaulting the event default...

5CVSS8.4AI score0.00623EPSS
Exploits0References5
Cvelist
Cvelist
added 2022/08/19 8:35 p.m.13 views

CVE-2022-36009 Incorrect parsing of access level in gomatrixserverlib and dendrite

gomatrixserverlib is a Go library for matrix protocol federation. Dendrite is a Matrix homeserver written in Go, an alternative to Synapse. The power level parsing within gomatrixserverlib was failing to parse the "eventsdefault" key of the m.room.powerlevels event, defaulting the event default...

5CVSS8.9AI score0.00623EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/08/19 12:0 a.m.3 views

gomatrixserverlib 安全漏洞

gomatrixserverlib is a Go library open-sourced by matrix.org. Used for common functions required by the matrix server. A security vulnerability exists in gomatrixserverlib, which stems from the inability of its power level parsing program to parse the "eventsdefault" keyword of the...

8.8CVSS7.7AI score0.00623EPSS
Exploits0References4
NVD
NVD
added 2018/06/14 9:29 p.m.6 views

CVE-2018-12423

In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.powerlevels event in force...

7.5CVSS7.5AI score0.00272EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2018/06/14 9:0 p.m.16 views

CVE-2018-12423

In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.powerlevels event in force...

7.5CVSS7.6AI score0.00272EPSS
Exploits0
Rows per page
Query Builder