Описание
Matrix Synapse Authorization Error
In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force.
Пакеты
Наименование
matrix-synapse
pip
Затронутые версииВерсия исправления
< 0.31.2
0.31.2
Связанные уязвимости
CVSS3: 7.5
ubuntu
больше 8 лет назад
In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force.
CVSS3: 7.5
nvd
больше 8 лет назад
In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force.
CVSS3: 7.5
debian
больше 8 лет назад
In Synapse before 0.31.2, unauthorised users can hijack rooms when the ...
CVSS3: 7.5
altlinux
больше 8 лет назад
ALT-PU-2018-1973: package `matrix-synapse` update to version 0.31.2-alt1