Security Advisory
CVE-2018-12291
7.5
HIGH
Vulnerability Description
The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where event visibility rules were not applied correctly.
Published Date
June 13, 2018
Official Source
NIST NVD Advisory