VYPR
← All advisories
Low severity3.5OSV Advisory· Published Nov 12, 2024· Updated Apr 15, 2026

CVE-2024-51749

CVE-2024-51749

Description

Element is a Matrix web client built using the Matrix React SDK. Versions of Element Web and Desktop earlier than 1.11.85 do not check if thumbnails for attachments, stickers and images are coherent. It is possible to add thumbnails to events trigger a file download once clicked. Fixed in element-web 1.11.85.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Element Hq/Element WebOSV2 versions
    no-media-devices-release, v0.1.2, v0.10.0, …+ 1 more
    • (no CPE)range: no-media-devices-release, v0.1.2, v0.10.0, …
    • (no CPE)range: <1.11.85

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.