CVE-2024-52813

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-52813
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-52813.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-52813
Aliases
Downstream
Related
Published
2025-01-07T15:25:47Z
Modified
2026-11-04T02:46:15Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity
Details

matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. Versions of the matrix-sdk-crypto Rust crate before 0.8.0 lack a dedicated mechanism to notify that a user's cryptographic identity has changed from a verified to an unverified one, which could cause client applications relying on the SDK to overlook such changes. matrix-sdk-crypto 0.8.0 adds a new VerificationLevel::VerificationViolation enum variant which indicates that a previously verified identity has been changed.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-223"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52813.json"
}
References

Affected packages

Git / github.com/matrix-org/matrix-rust-sdk

Affected ranges

Type
GIT
Repo
https://github.com/matrix-org/matrix-rust-sdk
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
2c43137f5faa88b9657d8ce80a1bcdd93f459517
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "0.8.0"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "0.8.0"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}

Affected versions

ruma-0.*
ruma-0.0.1
ruma-0.0.2
ruma-0.0.3
ruma-0.1.0
ruma-0.1.1
ruma-0.1.2
ruma-0.2.0
ruma-0.3.0
ruma-0.4.0
ruma-0.5.0
ruma-0.6.0
ruma-0.6.1
ruma-0.6.2
ruma-api-0.*
ruma-api-0.17.0
ruma-api-0.17.0-alpha.1
ruma-api-0.17.0-alpha.2
ruma-api-0.17.0-alpha.4
ruma-api-0.17.1
ruma-api-0.17.2
ruma-api-0.18.1
ruma-api-0.18.2
ruma-api-0.18.3
ruma-api-0.18.4
ruma-api-0.18.5
ruma-api-0.19.0
ruma-api-0.20.0
ruma-appservice-api-0.*
ruma-appservice-api-0.2.0
ruma-appservice-api-0.2.0-alpha.1
ruma-appservice-api-0.2.0-alpha.2
ruma-appservice-api-0.2.0-alpha.3
ruma-appservice-api-0.3.0
ruma-appservice-api-0.4.0
ruma-appservice-api-0.5.0
ruma-appservice-api-0.6.0
ruma-appservice-api-0.7.0
ruma-client-0.*
ruma-client-0.10.0
ruma-client-0.5.0
ruma-client-0.5.0-alpha.1
ruma-client-0.5.0-alpha.2
ruma-client-0.6.0
ruma-client-0.7.0
ruma-client-0.8.0
ruma-client-0.9.0
ruma-client-api-0.*
ruma-client-api-0.10.0
ruma-client-api-0.10.0-alpha.1
ruma-client-api-0.10.0-alpha.2
ruma-client-api-0.10.0-alpha.3
ruma-client-api-0.10.1
ruma-client-api-0.10.2
ruma-client-api-0.11.0
ruma-client-api-0.11.2
ruma-client-api-0.12.0
ruma-client-api-0.12.1
ruma-client-api-0.12.2
ruma-client-api-0.13.0
ruma-client-api-0.14.0
ruma-client-api-0.15.0
ruma-common-0.*
ruma-common-0.10.0
ruma-common-0.2.0
ruma-common-0.3.0
ruma-common-0.3.0-alpha.1
ruma-common-0.3.1
ruma-common-0.4.0
ruma-common-0.5.0
ruma-common-0.5.1
ruma-common-0.5.2
ruma-common-0.5.3
ruma-common-0.5.4
ruma-common-0.6.0
ruma-common-0.7.0
ruma-common-0.8.0
ruma-common-0.9.0
ruma-common-0.9.1
ruma-common-0.9.2
ruma-events-0.*
ruma-events-0.22.0
ruma-events-0.22.0-alpha.1
ruma-events-0.22.0-alpha.2
ruma-events-0.22.0-alpha.3
ruma-events-0.22.1
ruma-events-0.22.2
ruma-events-0.23.0
ruma-events-0.23.1
ruma-events-0.23.2
ruma-events-0.23.3
ruma-events-0.24.1
ruma-events-0.24.2
ruma-events-0.24.3
ruma-events-0.24.4
ruma-events-0.24.5
ruma-events-0.25.0
ruma-events-0.26.0
ruma-federation-api-0.*
ruma-federation-api-0.0.3
ruma-federation-api-0.1.0
ruma-federation-api-0.1.0-alpha.1
ruma-federation-api-0.1.0-alpha.2
ruma-federation-api-0.2.0
ruma-federation-api-0.3.0
ruma-federation-api-0.3.1
ruma-federation-api-0.4.0
ruma-federation-api-0.5.0
ruma-federation-api-0.6.0
ruma-identifiers-0.*
ruma-identifiers-0.17.0
ruma-identifiers-0.17.2
ruma-identifiers-0.18.0
ruma-identifiers-0.18.0-alpha.1
ruma-identifiers-0.18.1
ruma-identifiers-0.19.0
ruma-identifiers-0.19.1
ruma-identifiers-0.19.2
ruma-identifiers-0.19.3
ruma-identifiers-0.19.4
ruma-identifiers-0.20.0
ruma-identifiers-0.21.0
ruma-identifiers-0.22.0
ruma-identity-service-api-0.*
ruma-identity-service-api-0.0.1
ruma-identity-service-api-0.1.0
ruma-identity-service-api-0.1.0-alpha.1
ruma-identity-service-api-0.2.0
ruma-identity-service-api-0.3.0
ruma-identity-service-api-0.4.0
ruma-identity-service-api-0.5.0
ruma-identity-service-api-0.6.0
ruma-push-gateway-api-0.*
ruma-push-gateway-api-0.0.1
ruma-push-gateway-api-0.1.0
ruma-push-gateway-api-0.1.0-alpha.1
ruma-push-gateway-api-0.2.0
ruma-push-gateway-api-0.3.0
ruma-push-gateway-api-0.4.0
ruma-push-gateway-api-0.5.0
ruma-push-gateway-api-0.6.0
ruma-serde-0.*
ruma-serde-0.2.3
ruma-serde-0.3.0
ruma-serde-0.3.1
ruma-serde-0.4.0
ruma-serde-0.4.1
ruma-serde-0.4.2
ruma-serde-0.5.0
ruma-serde-0.6.0
ruma-signatures-0.*
ruma-signatures-0.10.0
ruma-signatures-0.11.0
ruma-signatures-0.12.0
ruma-signatures-0.6.0
ruma-signatures-0.6.0-alpha.1
ruma-signatures-0.7.0
ruma-signatures-0.7.1
ruma-signatures-0.7.2
ruma-signatures-0.8.0
ruma-signatures-0.9.0
ruma-state-res-0.*
ruma-state-res-0.1.0
ruma-state-res-0.2.0
ruma-state-res-0.3.0
ruma-state-res-0.4.0
ruma-state-res-0.4.1
ruma-state-res-0.5.0
ruma-state-res-0.6.0
ruma-state-res-0.7.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-52813.json"