Lucene search
+L

6 matches found

Vulnrichment
Vulnrichment
•added 2024/07/18 4:45 p.m.•16 views

CVE-2024-40648 `UserIdentity::is_verified` not checking verification status of own user identity while performing the check in matrix-rust-sdk

matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The UserIdentity::isverified method in the matrix-sdk-crypto crate before version 0.7.2 doesn't take into account the verification status of the user's own identity while performing the check and may as a result retur...

5.4CVSS6.6AI score0.0028EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/07/18 4:45 p.m.•36 views

CVE-2024-40648 `UserIdentity::is_verified` not checking verification status of own user identity while performing the check in matrix-rust-sdk

matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The UserIdentity::isverified method in the matrix-sdk-crypto crate before version 0.7.2 doesn't take into account the verification status of the user's own identity while performing the check and may as a result retur...

5.4CVSS6.5AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2024/07/18 4:45 p.m.•62 views

CVE-2024-40648 `UserIdentity::is_verified` not checking verification status of own user identity while performing the check in matrix-rust-sdk

matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The UserIdentity::isverified method in the matrix-sdk-crypto crate before version 0.7.2 doesn't take into account the verification status of the user's own identity while performing the check and may as a result retur...

5.4CVSS0.0028EPSS
SaveExploits0References2
Mend
Mend
•added 2024/07/18 4:45 p.m.•12 views

CVE-2024-40648

matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The UserIdentity::isverified method in the matrix-sdk-crypto crate before version 0.7.2 doesn't take into account the verification status of the user's own identity while performing the check and may as a result retur...

5.4CVSS0.0028EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/18 12:00 a.m.•6 views

CVE-2024-40648: Improper Authentication

matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The UserIdentity::isverified method in the matrix-sdk-crypto crate before version 0.7.2 doesn't take into account the verification status of the user's own identity while performing the check and may as a result retur...

5.4CVSS5.8AI score0.0028EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/18 12:00 a.m.•6 views

PT-2024-28965

Name of the Vulnerable Software and Affected Versions matrix-sdk-crypto versions prior to 0.7.2 Description The UserIdentity::is verified method in the matrix-sdk-crypto crate does not take into account the verification status of the user's own identity while performing the check, potentially...

6.3CVSS0.0028EPSS
SaveExploits0References14
Rows per page
Query Builder