1 matches found
matrix-sdk-ui: Incomplete edit validation
Impact The message edit validation logic in the matrix-sdk-ui crate before 0.16.1 is missing a check: when replacing an encrypted event, the replacement event itself is not required to be encrypted. This enables a malicious homeserver administrator or an actor with equivalent power to impersonate...
4.9CVSS5.8AI score0.00233EPSS
SaveExploits0References5Affected Software1
20