2 matches found
DEBIAN-CVE-2020-26891
AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to unsafe interpolation of the session GET parameter. This allows a remote attacker to execute an XSS attack on the domain Synapse is hosted on, by supplying the victim user with a malicious URL to the...
6.1CVSS6.5AI score0.01931EPSS
SaveExploits0References1
PYSEC-2020-238
AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to unsafe interpolation of the session GET parameter. This allows a remote attacker to execute an XSS attack on the domain Synapse is hosted on, by supplying the victim user with a malicious URL to the...
6.1CVSS6.6AI score0.01931EPSS
SaveExploits0References4Affected Software1
20