Vulnerability Bulletins |
CVE-2018-12291 |
|
| Affected software | MATRIX SYNAPSE |
| The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where event visibility rules were not applied correctly. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2018-12291 | |