CVE-2018-16515

—

CVSS 3.0

8.8 high

EPSS

2%p73

Published

Sep 18, 2018 (Sep 18, 2018)

Modified

Jun 17, 2026

Description

Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper transaction and event signature validation.

Vendors: matrix debian
Products: synapse, debian linux
Weakness: CWE-347
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.