Description (CNA)
The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where event visibility rules were not applied correctly.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/matrix-org/synapse/releases/tag/v0.31.1
- https://github.com/matrix-org/synapse/pull/3371
ADP enrichment
No English description supplied.