HIGH 7.5
PYSEC-2026-844
Matrix Synapse Authorization Error
상세
In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no `m.room.power_levels` event in force.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
참고
- https://nvd.nist.gov/vuln/detail/CVE-2018-12423 [ADVISORY]
- https://github.com/matrix-org/matrix-doc/issues/1304 [WEB]
- https://bugs.debian.org/901549 [WEB]
- https://github.com/matrix-org/synapse [PACKAGE]
- https://matrix.org/blog/2018/06/14/security-update-synapse-0-31-2 [WEB]
- https://pypi.org/project/matrix-synapse [PACKAGE]
- https://github.com/advisories/GHSA-ch5v-fhg8-7gv9 [ADVISORY]