{"id":"EUVD-2025-0042","enisaUuid":"fe9964cf-4fd3-3d70-af28-1c9396c1c407","description":"matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. Versions of the matrix-sdk-crypto Rust crate before 0.8.0 lack a dedicated mechanism to notify that a user\u0027s cryptographic identity has changed from a verified to an unverified one, which could cause client applications relying on the SDK to overlook such changes. matrix-sdk-crypto 0.8.0 adds a new VerificationLevel::VerificationViolation enum variant which indicates that a previously verified identity has been changed.","datePublished":"Jan 7, 2025, 3:25:47 PM","dateUpdated":"Jan 7, 2025, 5:11:35 PM","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","references":"https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-r5vf-wf4h-82gg\nhttps://github.com/matrix-org/matrix-rust-sdk/pull/3795\n","aliases":"CVE-2024-52813\nGHSA-r5vf-wf4h-82gg\n","assigner":"GitHub_M","epss":0.49,"enisaIdProduct":[{"id":"f9186e08-865e-3075-9f20-dd5294cbc6cc","product":{"name":"matrix-rust-sdk","vendor":{"name":"matrix-org"}},"product_version":"\u003c 0.8.0"}],"enisaIdVendor":[{"id":"5968157d-69e0-3f94-b539-7613230f8be6","vendor":{"name":"matrix-org"}}],"enisaIdVulnerability":[{"id":"5ab29680-5fe8-3598-ba00-ebccc011174e","vulnerability":{"id":"CVE-2024-52813","description":"matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. Versions of the matrix-sdk-crypto Rust crate before 0.8.0 lack a dedicated mechanism to notify that a user\u0027s cryptographic identity has changed from a verified to an unverified one, which could cause client applications relying on the SDK to overlook such changes. matrix-sdk-crypto 0.8.0 adds a new VerificationLevel::VerificationViolation enum variant which indicates that a previously verified identity has been changed.","datePublished":"Jan 7, 2025, 3:25:47 PM","dateUpdated":"Jan 7, 2025, 5:11:35 PM","status":"PUBLISHED","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","references":"https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-r5vf-wf4h-82gg\nhttps://github.com/matrix-org/matrix-rust-sdk/pull/3795\n","enisa_id":"EUVD-2025-0042\n","assigner":"GitHub_M","epss":0.49,"dataProcessed":"Nov 2, 2026, 7:18:58 AM","vulnerabilityProduct":[{"id":"02a316b3-4dda-3786-ad1b-8a2623986e7c","product":{"name":"matrix-rust-sdk","vendor":{"name":"matrix-org"}},"product_version":"\u003c 0.8.0"},{"id":"d9ff163d-2662-42ab-aeb9-004e36246240","product":{"name":"matrix-rust-sdk","vendor":{"name":"matrix-org"}},"product_version":"\u003c 0.8.0"}],"vulnerabilityVendor":[{"id":"11a7105c-aa4d-3c14-ab03-2240cfb5d041","vendor":{"name":"matrix-org"}}]}},{"id":"d05f3340-7c46-3165-99d9-b0ce2738a900","vulnerability":{"id":"GHSA-r5vf-wf4h-82gg","description":"matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity","datePublished":"Jan 7, 2025, 3:25:52 PM","dateUpdated":"Jan 22, 2025, 5:37:49 PM","baseScore":null,"references":"https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-r5vf-wf4h-82gg\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-52813\nhttps://github.com/matrix-org/matrix-rust-sdk/pull/3795\nhttps://github.com/matrix-org/matrix-rust-sdk\nhttps://rustsec.org/advisories/RUSTSEC-2024-0434.html\n","enisa_id":"EUVD-2025-0042\n","aliases":"GHSA-r5vf-wf4h-82gg\nCVE-2024-52813\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:10:45 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"a2f400a8-8960-35a1-a45e-36668c4e393f","advisory":{"id":"openSUSE-SU-2025:14726-1","description":"cargo-audit-advisory-db-20250204-1.1 on GA media","summary":"cargo-audit-advisory-db-20250204-1.1 on GA media","datePublished":"Feb 4, 2025, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:26:17 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_14726-1.json\nhttps://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JAVWAQ2L6YWTYJJN4PNMGZK3GT6FT6T2/\nhttps://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JAVWAQ2L6YWTYJJN4PNMGZK3GT6FT6T2/\nhttps://www.suse.com/security/cve/CVE-2024-52813/\n","aliases":"CVE-2024-52813\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"044be409-7002-32cc-8f53-0bb9897990aa","product":{"name":"cargo-audit-advisory-db-0:20250204-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"8df89301-0bd1-3158-81af-11fc00bea0ed","product":{"name":"cargo-audit-advisory-db-0:20250204-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"947d0649-29ed-3f49-87d0-27b2b14f8657","product":{"name":"cargo-audit-advisory-db-20250204-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"ad546468-e486-3c6b-a673-e275d5b8d3ca","product":{"name":"cargo-audit-advisory-db-0:20250204-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"c7cc843d-4a9e-3595-9763-94ba74f9939e","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"cbd18afb-48e6-309d-b4af-9a23f88f209d","product":{"name":"cargo-audit-advisory-db-20250204-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"da5b529b-4df8-3d95-8637-3809f5f62c78","product":{"name":"cargo-audit-advisory-db-20250204-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"fee4f8c6-dabb-3725-8217-9c3aed1fc703","product":{"name":"cargo-audit-advisory-db-20250204-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"ffea6c78-4c2e-3d12-a319-e76c26b619df","product":{"name":"cargo-audit-advisory-db-0:20250204-1.1.aarch64","vendor":{"name":"SUSE"}}}]}}]}