high7.5
CVE-2018-12291
The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where …
Impact
The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where event visibility rules were not applied correctly.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Matrix | Synapse | before 0.31.1 |