Lucene search
+L

2 matches found

OSV
OSV
added 2026/06/04 2:50 p.m.14 views

GHSA-H97M-27FX-42RX matrix-sdk-ui: Incomplete edit validation

Impact The message edit validation logic in the matrix-sdk-ui crate before 0.16.1 is missing a check: when replacing an encrypted event, the replacement event itself is not required to be encrypted. This enables a malicious homeserver administrator or an actor with equivalent power to impersonate...

4.9CVSS5.9AI score0.00019EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/06/04 2:50 p.m.21 views

matrix-sdk-ui: Incomplete edit validation

Impact The message edit validation logic in the matrix-sdk-ui crate before 0.16.1 is missing a check: when replacing an encrypted event, the replacement event itself is not required to be encrypted. This enables a malicious homeserver administrator or an actor with equivalent power to impersonate...

5.9AI score0.00019EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder