Vulnerability RUSTSEC-2022-0062
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
3 years ago
October 24, 2022 at 12:00 PM UTC
matrix-sdk 0.6.0 logs access tokens
0.6.0 - 0.6.1
0.6.0 - 0.6.1
Summary
matrix-sdk 0.6.0 logs access tokens
Details
When sending Matrix requests using an affected version of matrix-sdk in an application that writes logs using tracing-subscriber (in a way that includes fields of tracing spans such as tracing_subscribers default text output from the fmt module), these logs will contain the user's access token.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
1 year ago
Matrix Rust SDK vulnerable to SQL Injection through its EventCache implementation
0.11.0 - 0.12.0 GHSA-275g-g844-73jh
0.11.0 - 0.12.0 GHSA-275g-g844-73jh
Medium Risk
3 years ago
matrix-sdk 0.6.0 logs access tokens
0.6.0 - 0.6.1 GHSA-fc4h-xcf3-qj5f
0.6.0 - 0.6.1 GHSA-fc4h-xcf3-qj5f
Impacted packages
Timeline
Published
3 years ago
October 24, 2022 at 12:00 PM UTC
Fixed (0.6.2)
3 years ago
October 24, 2022 at 10:55 AM UTC
Last Modified
2 years ago
November 08, 2023 at 04:18 AM UTC