-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| matrix-synapse | pip | < 1.120.1 | 1.120.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper validation of federated invites. Key functions involved in processing invites would be in federation transport handlers (receiving events) and room membership handlers (processing invites). The lack of validation in these areas would allow malformed invites to propagate into the system, breaking sync. Confidence is medium due to limited code visibility, but these components align with the described attack vector and CWE-20 root cause.