SUSE CVE-2024-40648

matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The UserIdentity::isverified method in the matrix-sdk-crypto crate before version 0.7.2 doesn't take into account the verification status of the user's own identity while performing the check and may as a result retur...

CVE-2024-38430

Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-38430

Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-38431

Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...

CVE-2024-38432

Matrix Tafnit v8 - CWE-646: Reliance on File Name or Extension of Externally-Supplied File...

CVE-2024-38431

Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...

CVE-2024-38432

Matrix Tafnit v8 - CWE-646: Reliance on File Name or Extension of Externally-Supplied File...

CVE-2024-38429

Matrix Tafnit v8 - CWE-552: Files or Directories Accessible to External Parties...

CVE-2024-38429

Matrix Tafnit v8 - CWE-552: Files or Directories Accessible to External Parties...

CVE-2024-38432

Matrix Tafnit v8 is identified as the affected product for CVE-2024-38432, with the root cause described as CWE-646: Reliance on the file name or extension of externally-supplied files. The NVD entry assigns a high overall impact (CVSSv3.1: 9.8 CRITICAL) with network attack vector, no user intera...

CVE-2024-38432 Matrix – Tafnit v8 CWE-646: Reliance on File Name or Extension of Externally-Supplied File

Matrix Tafnit v8 - CWE-646: Reliance on File Name or Extension of Externally-Supplied File...

CVE-2024-38432 Matrix – Tafnit v8 CWE-646: Reliance on File Name or Extension of Externally-Supplied File

Matrix Tafnit v8 - CWE-646: Reliance on File Name or Extension of Externally-Supplied File...

CVE-2024-38431 Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy

Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...

CVE-2024-38431

CVE-2024-38431 relates to Matrix Tafnit v8 and CWE-204: Observable Response Discrepancy. The available documents identify Matrix Tafnit version 8 as affected, with the underlying issue described as an observable response discrepancy. Exploitation status is not documented in the provided sources. ...

CVE-2024-38430

The CVE-2024-38430 entry describes a Cross-site Scripting (XSS) vulnerability in Matrix software (Matrix Tafnit). The root cause is improper neutralization of input during web page generation. CNNVD associates this with Matrix Tafnit version v8, indicating the issue affects Matrix Tafnit and is e...

CVE-2024-38430 Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-38430 Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-38429 Matrix - CWE-552: Files or Directories Accessible to External Parties

Matrix Tafnit v8 - CWE-552: Files or Directories Accessible to External Parties...

CVE-2024-38429 Matrix - CWE-552: Files or Directories Accessible to External Parties

Matrix Tafnit v8 - CWE-552: Files or Directories Accessible to External Parties...

CVE-2024-38430: Improper Neutralization of Input During Web Page Generation

Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...