← Back to CVE List

CVE-2018-12291

Published: 2018-06-13T14:29Z
Last Modified: 2024-11-21T03:44Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where event visibility rules were not applied correctly. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt