CVE-2018-12423

In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force

published June 14, 2018

CVSS
—
EPSS
2%
Percentile
78.5
In the wild
Unconfirmed
What it is

In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01811 · 78.5th percentile
Published
2018-06-14T21:00Z
EPSS history
Timeline
  • 14 JUN 21:00Z
    In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force
    cvelistv5