CVE-2022-39252
2 advisories.
crates.io/matrix-sdk-crypto CVE-2022-39252: medium 6.5
matrix-sdk-crypto contains potential impersonation via room key forward responses
Action: Upgrade matrix-sdk-crypto to 0.6.0 or later.
cargo update -p matrix-sdk-crypto --precise 0.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.0 | - |
Fixed versions
| 0.6.0 |
Sources
- osv: GHSA-vp68-2wrm-69qm
- https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-vp68-2wrm-69qm
- https://nvd.nist.gov/vuln/detail/CVE-2022-39252
- https://github.com/matrix-org/matrix-rust-sdk/commit/093fb5d0aa21c0b5eaea6ec96b477f1075271cbb
- https://github.com/matrix-org/matrix-rust-sdk/commit/41449d2cc360e347f5d4e1c154ec1e3185f11acd
- https://github.com/matrix-org/matrix-rust-sdk
- https://github.com/matrix-org/matrix-rust-sdk/releases/tag/matrix-sdk-0.6.0
- https://rustsec.org/advisories/RUSTSEC-2022-0085.html
CVE-2022-39252 · published · modified · JSON
crates.io/matrix-sdk-crypto CVE-2022-39252: high 7.5
matrix-sdk Impersonation of room keys
Action: Upgrade matrix-sdk-crypto to 0.6.0 or later.
cargo update -p matrix-sdk-crypto --precise 0.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.6.0 | - |
Fixed versions
| 0.6.0 |
Sources
- osv: RUSTSEC-2022-0085
- https://crates.io/crates/matrix-sdk-crypto
- https://rustsec.org/advisories/RUSTSEC-2022-0085.html
- https://github.com/matrix-org/matrix-rust-sdk/commit/093fb5d0aa21c0b5eaea6ec96b477f1075271cbb
- https://github.com/matrix-org/matrix-rust-sdk/commit/41449d2cc360e347f5d4e1c154ec1e3185f11acd
CVE-2022-39252 · published · modified · JSON