Описание
In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| matrix-synapse | fixed | 0.31.2+dfsg-1 | package |
Примечания
https://github.com/matrix-org/synapse/pull/3397
Связанные уязвимости
CVSS3: 7.5
ubuntu
больше 8 лет назад
In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force.
CVSS3: 7.5
nvd
больше 8 лет назад
In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force.
CVSS3: 7.5
altlinux
больше 8 лет назад
ALT-PU-2018-1973: package `matrix-synapse` update to version 0.31.2-alt1