CVE-2019-18835

CRITICAL

Details

CVSS v3: 9.8
CVSS v2: 7.5
NVD published: 2019-11-08 00:15:10
Affected versions: cpe:2.3:a:matrix:synapse:*:*:*:*:*:*:*:*
Summary: Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join, /send_leave, and /invite may not be correctly signed, or may not come from the expected servers.
Remediation: Not available in our cache.
Exploit info: Not available in our cache.

TopVuln sends digest emails with high-risk CVE picks across multiple authoritative sources—curated with EPSS and AI. Choose daily per-stream emails and optional weekly or monthly roundups.

Subscribe — free email digest or paid plan

Information is aggregated from multiple authoritative sources for convenience; verify with NVD and vendors before operational decisions.