DEBIAN-CVE-2018-12423

In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.powerlevels event in force...

PT-2018-11162 · Matrix.Org +2 · Synapse +2

Name of the Vulnerable Software and Affected Versions: Synapse versions prior to 0.31.2 Description: The issue allows unauthorized users to hijack rooms when there is no m.room.power levels event in force. This can lead to unauthorized access and control over rooms. Recommendations: For versions...