vulnerability

Ubuntu: USN-6076-1 (CVE-2018-12423): Synapse vulnerabilities

Try Surface Command
Back to search
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Jun 14, 2018
Added
May 17, 2023
Modified
Nov 15, 2024

Description

In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force.

Solution

ubuntu-pro-upgrade-matrix-synapse

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today