Security Advisory

CVE-2019-18835

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-11-07 23:12:07

Last updated 2024-08-05 02:02:39

Assigner mitre

State PUBLISHED

Description

Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join, /send_leave, and /invite may not be correctly signed, or may not come from the expected servers.

← Browse all CVEs View on cve.org ↗