element-hq / element-hq/synapse
.well-known lookups can be used to circumvent the IP address blacklist
Open
S-Minor
Security
T-Defect
- Dominant language
- Python
- Stars
- 4.6k
- Forks
- 600
- Avg merge
- 5d 22h
- Merged PRs (30d)
- 51
Description
This issue has been migrated from [#5273](https://github.com/matrix-org/synapse/issues/5273).
---
further to #3953: It's possible to get synapse to make arbitrary GET requests on the local network by returning a 302 from the `.well-known/matrix/server` endpoint. It's not obvious if this can be abused, but it seems like a loophole that should be closed in the interests of security.
Contributor guide
Assessment
This issue has not been assessed yet.