{"id":"EUVD-2024-2249","enisaUuid":"6c099797-b3fb-3a63-9834-c981a82edbce","description":"matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The `UserIdentity::is_verified()` method in the matrix-sdk-crypto crate before version 0.7.2 doesn\u0027t take into account the verification status of the user\u0027s own identity while performing the check and may as a result return a value contrary to what is implied by its name and documentation. If the method is used to decide whether to perform sensitive operations towards a user identity, a malicious homeserver could manipulate the outcome in order to make the identity appear trusted. This is not a typical usage of the method, which lowers the impact. The method itself is not used inside the `matrix-sdk-crypto` crate. The 0.7.2 release of the `matrix-sdk-crypto` crate includes a fix. All users are advised to upgrade. There are no known workarounds for this vulnerability.","datePublished":"Jul 18, 2024, 4:45:56 PM","dateUpdated":"Aug 2, 2024, 4:33:11 AM","baseScore":5.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","references":"https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-4qg4-cvh2-crgg\nhttps://github.com/matrix-org/matrix-rust-sdk/commit/76a7052149bb8f722df12da915b3a06d19a6695a\n","aliases":"CVE-2024-40648\nGHSA-4qg4-cvh2-crgg\n","assigner":"GitHub_M","epss":0.28,"enisaIdProduct":[{"id":"c6debcab-5ac0-3382-8c1b-89c1a9b3d3de","product":{"name":"matrix-rust-sdk","vendor":{"name":"matrix-org"}},"product_version":"\u003c 0.7.2"}],"enisaIdVendor":[{"id":"01c33edd-7b8f-3a98-ba2c-92f85d8f07b4","vendor":{"name":"matrix-org"}}],"enisaIdVulnerability":[{"id":"86fc68e7-d274-3424-b84e-f0e61e4a6018","vulnerability":{"id":"CVE-2024-40648","description":"matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The `UserIdentity::is_verified()` method in the matrix-sdk-crypto crate before version 0.7.2 doesn\u0027t take into account the verification status of the user\u0027s own identity while performing the check and may as a result return a value contrary to what is implied by its name and documentation. If the method is used to decide whether to perform sensitive operations towards a user identity, a malicious homeserver could manipulate the outcome in order to make the identity appear trusted. This is not a typical usage of the method, which lowers the impact. The method itself is not used inside the `matrix-sdk-crypto` crate. The 0.7.2 release of the `matrix-sdk-crypto` crate includes a fix. All users are advised to upgrade. There are no known workarounds for this vulnerability.","datePublished":"Jul 18, 2024, 4:45:56 PM","dateUpdated":"Aug 2, 2024, 4:33:11 AM","status":"PUBLISHED","baseScore":5.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","references":"https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-4qg4-cvh2-crgg\nhttps://github.com/matrix-org/matrix-rust-sdk/commit/76a7052149bb8f722df12da915b3a06d19a6695a\n","enisa_id":"EUVD-2024-2249\n","assigner":"GitHub_M","epss":0.28,"dataProcessed":"Oct 27, 2026, 7:19:04 AM","vulnerabilityProduct":[{"id":"9adb8d76-7c6d-4de2-928f-81683ba24d33","product":{"name":"matrix-rust-sdk","vendor":{"name":"matrix-org"}},"product_version":"\u003c 0.7.2"},{"id":"9d2c03e5-0ab8-3433-8e43-fcfe51a508ae","product":{"name":"matrix-rust-sdk","vendor":{"name":"matrix-org"}},"product_version":"\u003c 0.7.2"}],"vulnerabilityVendor":[{"id":"50765b0f-6803-309a-a7c9-b112da977567","vendor":{"name":"matrix-org"}}]}},{"id":"8e0377f5-c47e-3907-bff9-95ea3d6fd831","vulnerability":{"id":"GHSA-4qg4-cvh2-crgg","description":"matrix-sdk-crypto\u0027s `UserIdentity::is_verified` not checking verification status of own user identity while performing the check","datePublished":"Jul 18, 2024, 3:28:07 PM","dateUpdated":"Jul 19, 2024, 3:27:44 PM","baseScore":null,"references":"https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-4qg4-cvh2-crgg\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-40648\nhttps://github.com/matrix-org/matrix-rust-sdk/commit/76a7052149bb8f722df12da915b3a06d19a6695a\nhttps://github.com/matrix-org/matrix-rust-sdk\nhttps://github.com/matrix-org/matrix-rust-sdk/releases/tag/0.7.2-crypto\nhttps://rustsec.org/advisories/RUSTSEC-2024-0356.html\n","enisa_id":"EUVD-2024-2249\n","aliases":"CVE-2024-40648\nGHSA-4qg4-cvh2-crgg\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:09:32 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"e78bca96-1bff-3395-8b9b-009ebb393833","advisory":{"id":"openSUSE-SU-2024:14224-1","description":"cargo-audit-advisory-db-20240730-1.1 on GA media","summary":"cargo-audit-advisory-db-20240730-1.1 on GA media","datePublished":"Jul 30, 2024, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:15:59 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14224-1.json\nhttps://www.suse.com/security/cve/CVE-2024-40648/\n","aliases":"CVE-2024-40648\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0d781c67-5f24-3cf9-b20f-d5e5a7752a56","product":{"name":"cargo-audit-advisory-db-0:20240730-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"0fe3993d-0f54-3956-a0ed-3ce75f11e4cb","product":{"name":"cargo-audit-advisory-db-0:20240730-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"2532124c-ca69-3f79-94d3-d3573009079c","product":{"name":"cargo-audit-advisory-db-20240730-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"42bfc790-355c-3e15-84ec-fcfcba9b4655","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"58cc6758-aa43-33fa-9a44-39961de86844","product":{"name":"cargo-audit-advisory-db-0:20240730-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"84b7fa0d-f892-31e1-b1a3-7bb534a60d19","product":{"name":"cargo-audit-advisory-db-20240730-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"99855e49-04cc-32bc-b0b8-f40ecb076875","product":{"name":"cargo-audit-advisory-db-20240730-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"a7e9a1d6-1e36-38bf-b679-214f2ff25fe2","product":{"name":"cargo-audit-advisory-db-20240730-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"fc960a70-0fb6-398d-befc-e44c5573b8f9","product":{"name":"cargo-audit-advisory-db-0:20240730-1.1.ppc64le","vendor":{"name":"SUSE"}}}]}}]}