CVE-2018-10657

CVE-2018-10657 describes a denial-of-service vulnerability affecting Matrix Synapse versions prior to 0.28.1. This flaw allows an attacker to render chat rooms unusable by injecting malicious events with an extremely large depth value. The vulnerability carries a CVSS v3 score of 7.5 (High), indicating it can be exploited remotely with low attack complexity and without user interaction, leading to a high impact on availability. This vulnerability was exploited in the wild in April 2018, though there is no publicly available exploit code, Metasploit module, or significant community discussion surrounding it.