3 matches found
PYSEC-2026-844 Matrix Synapse Authorization Error
In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.powerlevels event in force...
DEBIAN-CVE-2018-12423
In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.powerlevels event in force...
PT-2018-11162
Name of the Vulnerable Software and Affected Versions Synapse versions prior to 0.31.2 Description The issue allows unauthorized users to hijack rooms when there is no m.room.power levels event in force. This can lead to unauthorized access and control over rooms. Recommendations For versions pri...