CVE-2020-26891

Published: 2020-10-19T17:15Z

Last Modified: 2024-11-21T05:20Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to unsafe interpolation of the session GET parameter. This allows a remote attacker to execute an XSS attack on the domain Synapse is hosted on, by supplying the victim user with a malicious URL to the /_matrix/client/r0/auth/*/fallback/web or /_matrix/client/unstable/auth/*/fallback/web Synapse endpoints. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt