3 matches found
Input validation
Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper transaction and event signature validation...
CVE-2018-16515
Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper transaction and event signature validation...
PT-2018-13604 · Matrix +2 · Matrix Synapse +2
Name of the Vulnerable Software and Affected Versions: Matrix Synapse versions prior to 0.33.3.1 Matrix Synapse version 0.33.2.1 Description: The issue allows remote attackers to spoof events and possibly have other impacts by leveraging improper transaction and event signature validation...