CVE-2019-18835

Advisory

Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join, /send_leave, and /invite may not be correctly signed, or may not come from the expected servers.

Affected functions:
synapse.handlers.federation.FederationHandler.on_make_join_request
synapse.handlers.federation.FederationHandler.on_make_leave_request
synapse.federation.federation_server.FederationServer.on_invite_request
synapse.federation.federation_server.FederationServer.on_send_join_request
synapse.federation.federation_server.FederationServer.on_send_leave_request

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/advisories/GHSA-cppw-2mf8-qpm5
• https://nvd.nist.gov/vuln/detail/CVE-2019-18835
• https://github.com/matrix-org/synapse/pull/6262
• https://github.com/matrix-org/synapse
• https://github.com/matrix-org/synapse/releases/tag/v1.5.0
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18835