element-hq / element-hq/synapse
`/directory/list/room/` leaks if the rooms exists on the server
Open
S-Minor
T-Defect
- Dominant language
- Python
- Stars
- 4.6k
- Forks
- 600
- Avg merge
- 5d 22h
- Merged PRs (30d)
- 51
Description
This issue has been migrated from [#9323](https://github.com/matrix-org/synapse/issues/9323).
---
If the room exists, but is private, we respond with the fact its private. If we don't know the room we 404. This is a potential privacy leak.
Contributor guide
Assessment
This issue has not been assessed yet.