CVE-2018-12423

Published June 14th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

5

MEDIUM

Affected

1

PROJECT

Description

In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force.

matrix-org/matrix-spec-proposals

Proposals for changes to the matrix specification

GitHub

1.23K