cpe:/a:matrix:synapse:0.0.1 cpe:/a:matrix:synapse:0.1.0 cpe:/a:matrix:synapse:0.1.1 cpe:/a:matrix:synapse:0.1.2 cpe:/a:matrix:synapse:0.2.0 cpe:/a:matrix:synapse:0.2.1 cpe:/a:matrix:synapse:0.2.2 cpe:/a:matrix:synapse:0.2.3 cpe:/a:matrix:synapse:0.3.0 cpe:/a:matrix:synapse:0.3.1 cpe:/a:matrix:synapse:0.3.2 cpe:/a:matrix:synapse:0.3.3 cpe:/a:matrix:synapse:0.3.4 cpe:/a:matrix:synapse:0.4.0 cpe:/a:matrix:synapse:0.4.1 cpe:/a:matrix:synapse:0.4.2 cpe:/a:matrix:synapse:0.5.0 cpe:/a:matrix:synapse:0.5.1 cpe:/a:matrix:synapse:0.5.2 cpe:/a:matrix:synapse:0.5.3 cpe:/a:matrix:synapse:0.5.4 cpe:/a:matrix:synapse:0.6.0 cpe:/a:matrix:synapse:0.6.1 cpe:/a:matrix:synapse:0.7.0 cpe:/a:matrix:synapse:0.7.1 cpe:/a:matrix:synapse:0.8.0 cpe:/a:matrix:synapse:0.8.1 cpe:/a:matrix:synapse:0.9.0:- cpe:/a:matrix:synapse:0.9.1 cpe:/a:matrix:synapse:0.9.2:- cpe:/a:matrix:synapse:0.9.3:- cpe:/a:matrix:synapse:0.9.3:rc1 cpe:/a:matrix:synapse:0.9.4:rc1 cpe:/a:matrix:synapse:0.10.0:- cpe:/a:matrix:synapse:0.10.0:rc1 cpe:/a:matrix:synapse:0.10.0:rc2 cpe:/a:matrix:synapse:0.10.0:rc3 cpe:/a:matrix:synapse:0.10.0:rc4 cpe:/a:matrix:synapse:0.10.0:rc5 cpe:/a:matrix:synapse:0.10.0:rc6 cpe:/a:matrix:synapse:0.10.1:rc1 cpe:/a:matrix:synapse:0.11.0:- cpe:/a:matrix:synapse:0.11.0:rc2 cpe:/a:matrix:synapse:0.11.1 cpe:/a:matrix:synapse:0.12.0:- cpe:/a:matrix:synapse:0.12.0:rc1 cpe:/a:matrix:synapse:0.12.0:rc2 cpe:/a:matrix:synapse:0.12.0:rc3 cpe:/a:matrix:synapse:0.12.1:rc1 cpe:/a:matrix:synapse:0.13.0 cpe:/a:matrix:synapse:0.13.1 cpe:/a:matrix:synapse:0.13.2 cpe:/a:matrix:synapse:0.13.3 cpe:/a:matrix:synapse:0.14.0:- cpe:/a:matrix:synapse:0.14.0:rc1 cpe:/a:matrix:synapse:0.14.0:rc2 cpe:/a:matrix:synapse:0.15.0:rc1 cpe:/a:matrix:synapse:0.16.0:- cpe:/a:matrix:synapse:0.16.0:rc1 cpe:/a:matrix:synapse:0.16.0:rc2 cpe:/a:matrix:synapse:0.16.1:rc1 cpe:/a:matrix:synapse:0.17.0:- cpe:/a:matrix:synapse:0.17.0:rc1 cpe:/a:matrix:synapse:0.17.0:rc2 cpe:/a:matrix:synapse:0.17.0:rc3 cpe:/a:matrix:synapse:0.17.0:rc4 cpe:/a:matrix:synapse:0.17.1:- cpe:/a:matrix:synapse:0.17.1:rc1 cpe:/a:matrix:synapse:0.17.2:- cpe:/a:matrix:synapse:0.17.2:rc1 cpe:/a:matrix:synapse:0.17.3 cpe:/a:matrix:synapse:0.18.0:- cpe:/a:matrix:synapse:0.18.0:rc1 cpe:/a:matrix:synapse:0.18.1:- cpe:/a:matrix:synapse:0.18.1:rc1 cpe:/a:matrix:synapse:0.18.2:- cpe:/a:matrix:synapse:0.18.2:rc1 cpe:/a:matrix:synapse:0.18.2:rc2 cpe:/a:matrix:synapse:0.18.2:rc3 cpe:/a:matrix:synapse:0.18.2:rc4 cpe:/a:matrix:synapse:0.18.2:rc5 cpe:/a:matrix:synapse:0.18.3 cpe:/a:matrix:synapse:0.18.4:- cpe:/a:matrix:synapse:0.18.4:rc1 cpe:/a:matrix:synapse:0.18.5:- cpe:/a:matrix:synapse:0.18.5:rc1 cpe:/a:matrix:synapse:0.18.5:rc2 cpe:/a:matrix:synapse:0.18.5:rc3 cpe:/a:matrix:synapse:0.18.6:- cpe:/a:matrix:synapse:0.18.6:rc1 cpe:/a:matrix:synapse:0.18.6:rc2 cpe:/a:matrix:synapse:0.18.6:rc3 cpe:/a:matrix:synapse:0.18.7:- cpe:/a:matrix:synapse:0.18.7:rc1 cpe:/a:matrix:synapse:0.18.7:rc2 cpe:/a:matrix:synapse:0.19.0:- cpe:/a:matrix:synapse:0.19.0:rc1 cpe:/a:matrix:synapse:0.19.0:rc2 cpe:/a:matrix:synapse:0.19.0:rc3 cpe:/a:matrix:synapse:0.19.0:rc4 cpe:/a:matrix:synapse:0.19.1 cpe:/a:matrix:synapse:0.19.2 cpe:/a:matrix:synapse:0.19.3:- cpe:/a:matrix:synapse:0.19.3:rc1 cpe:/a:matrix:synapse:0.19.3:rc2 cpe:/a:matrix:synapse:0.20.0:- cpe:/a:matrix:synapse:0.20.0:rc1 cpe:/a:matrix:synapse:0.21.0:- cpe:/a:matrix:synapse:0.21.0:rc1 cpe:/a:matrix:synapse:0.21.0:rc2 cpe:/a:matrix:synapse:0.21.0:rc3 cpe:/a:matrix:synapse:0.21.1 cpe:/a:matrix:synapse:0.22.0:- cpe:/a:matrix:synapse:0.22.0:rc1 cpe:/a:matrix:synapse:0.22.0:rc2 cpe:/a:matrix:synapse:0.22.1 cpe:/a:matrix:synapse:0.23.0:- cpe:/a:matrix:synapse:0.23.0:rc1 cpe:/a:matrix:synapse:0.23.0:rc2 cpe:/a:matrix:synapse:0.23.1 cpe:/a:matrix:synapse:0.24.0:- cpe:/a:matrix:synapse:0.24.0:rc1 cpe:/a:matrix:synapse:0.24.1 cpe:/a:matrix:synapse:0.25.0:- cpe:/a:matrix:synapse:0.25.0:rc1 cpe:/a:matrix:synapse:0.25.1 cpe:/a:matrix:synapse:0.26.0:- cpe:/a:matrix:synapse:0.26.0:rc1 cpe:/a:matrix:synapse:0.26.1 cpe:/a:matrix:synapse:0.27.0:- cpe:/a:matrix:synapse:0.27.0:rc1 cpe:/a:matrix:synapse:0.27.0:rc2 cpe:/a:matrix:synapse:0.27.1 cpe:/a:matrix:synapse:0.27.2 cpe:/a:matrix:synapse:0.27.3 cpe:/a:matrix:synapse:0.27.3:rc1 cpe:/a:matrix:synapse:0.27.3:rc2 cpe:/a:matrix:synapse:0.27.4 cpe:/a:matrix:synapse:0.28.0:- cpe:/a:matrix:synapse:0.28.0:rc1 cpe:/a:matrix:synapse:0.28.1 cpe:/a:matrix:synapse:0.29.0 cpe:/a:matrix:synapse:0.29.1 cpe:/a:matrix:synapse:0.30.0:- cpe:/a:matrix:synapse:0.30.0:rc1 cpe:/a:matrix:synapse:0.31.0:- cpe:/a:matrix:synapse:0.31.0:rc1 CVE-2018-12291 2018-06-13T10:29:00.273-04:00 2019-10-02T20:03:26.223-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2018-08-03T09:45:19.107-04:00 CONFIRM https://github.com/matrix-org/synapse/pull/3371 CONFIRM https://github.com/matrix-org/synapse/releases/tag/v0.31.1 The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where event visibility rules were not applied correctly.