Vulnerability GHSA-fc4h-xcf3-qj5f
Medium Risk
MEDIUM RISK
CVSS Score: 6.0
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
3 years ago
October 25, 2022 at 08:22 PM UTC
matrix-sdk 0.6.0 logs access tokens
0.6.0 - 0.6.1
0.6.0 - 0.6.1
Summary
matrix-sdk 0.6.0 logs access tokens
Details
When sending Matrix requests using an affected version of matrix-sdk in an application that writes logs using tracing-subscriber (in a way that includes fields of tracing spans such as tracing_subscribers default text output from the fmt module), these logs will contain the user's access token.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
1 year ago
Matrix Rust SDK vulnerable to SQL Injection through its EventCache implementation
0.11.0 - 0.12.0 GHSA-275g-g844-73jh
0.11.0 - 0.12.0 GHSA-275g-g844-73jh
Unknown
3 years ago
matrix-sdk 0.6.0 logs access tokens
0.6.0 - 0.6.1 RUSTSEC-2022-0062
0.6.0 - 0.6.1 RUSTSEC-2022-0062
Impacted packages
Timeline
Published
3 years ago
October 25, 2022 at 08:22 PM UTC
Fixed (0.6.2)
3 years ago
October 24, 2022 at 10:55 AM UTC
Last Modified
2 years ago
November 08, 2023 at 04:18 AM UTC