CVE-2024-47779

CVE-2024-47779 affects Element Web (Matrix client) versions 1.11.70–1.11.80, where an issue in the non-shared codebase can expose access tokens to third parties under crafted conditions, with at least one vector identified via malicious widgets. The vulnerability is mitigated by upgrading to Elem...

CVE-2024-47771 Element Desktop vulnerable to potential exposure of access token via authenticated media

Element Desktop is a Matrix client for desktop platforms. Element Desktop versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally, involvi...