Synapse Security Vulnerabilities and Issues — Synapse CVE List

Lucene search

MatrixSynapse

2 matches found

CVE•added 2018/06/13 2:29 p.m.•44 views

CVE-2018-12291

The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where event visibility rules were not applied correctly.

7.5CVSS7.4AI score0.00211EPSS

CVE•added 2018/06/14 9:29 p.m.•43 views

CVE-2018-12423

In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force.

7.5CVSS7.4AI score0.00349EPSS