Lucene search
+L

33 matches found

CVE
CVE
•added 2025/04/03 5:54 p.m.•57 views

CVE-2025-31126

Element X iOS (Matrix client) is affected in versions 1.6.13 through 25.03.7 where the entity controlling the element.json well-known file can, under certain conditions, access media encryption keys used for an Element Call, leaking confidentiality. The issue is fixed in version 25.03.8. Affected...

5.3CVSS6.8AI score0.002EPSS
SaveExploits0References2
OSV
OSV
•added 2025/04/03 5:54 p.m.•19 views

CVE-2025-31126 Element X iOS allows the entity in control of the well-known file to break the confidentiality of embedded Element Call

Element X iOS is a Matrix iOS Client provided by Element. In Element X iOS version between 1.6.13 and 25.03.7, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. This vulnerability ...

5.3CVSS6.7AI score
SaveExploits0References4
CVE
CVE
•added 2025/04/03 5:54 p.m.•70 views

CVE-2025-31127

Element X Android (Matrix Android client by element.io) is affected in versions 0.4.16 through 25.03.3 where the entity controlling the element.json well-known file can, under certain conditions, access the media encryption keys used for an Element Call. The issue stems from how the well-known co...

5.3CVSS7AI score0.002EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/04/03 5:54 p.m.•16 views

CVE-2025-31127 Element X Android allows the entity in control of the well-known file to break the confidentiality embedded Element Call

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS5.2AI score0.002EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/04/03 5:54 p.m.•34 views

CVE-2025-31127 Element X Android allows the entity in control of the well-known file to break the confidentiality embedded Element Call

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS0.002EPSS
SaveExploits0References2
OSV
OSV
•added 2025/04/03 5:54 p.m.•50 views

CVE-2025-31127 Element X Android allows the entity in control of the well-known file to break the confidentiality embedded Element Call

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS6.8AI score
SaveExploits0References4
Mend
Mend
•added 2025/04/03 5:54 p.m.•6 views

CVE-2025-31127

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

6.9CVSS0.002EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/04/03 12:00 a.m.•18 views

PT-2025-14781 · Element · Element Ios

Name of the Vulnerable Software and Affected Versions: Element X iOS versions 1.6.13 through 25.03.7 Description: The issue allows an entity in control of the element.json well-known file to access media encryption keys used for an Element Call under certain conditions. Recommendations: For...

5.3CVSS6.2AI score0.002EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/04/03 12:00 a.m.•18 views

Element X iOS 信息泄露漏洞

Element X iOS is an Element open source next-generation Matrix client for iOS built on SwiftUI for Matrix rust-sdk. An information disclosure vulnerability exists in Element X iOS versions 1.6.13 through 25.03.7, which originates in the element.json file and could lead to the disclosure of media...

5.3CVSS6AI score0.002EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/03 12:00 a.m.•21 views

PT-2025-14782 · Element · Element

Name of the Vulnerable Software and Affected Versions: Element X Android versions 0.4.16 through 25.03.3 Description: The issue allows an entity in control of the element.json well-known file to access media encryption keys used for an Element Call under certain conditions. Recommendations: For...

5.3CVSS6.5AI score0.002EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/04/03 12:00 a.m.•20 views

Element X Android 信息泄露漏洞

Element X Android is an Element open source Android Matrix application using Matrix Rust Sdk and Jetpack Compose. An information disclosure vulnerability exists in Element X Android versions 0.4.16 through 25.03.3, which originates in the element.json file and could lead to the disclosure of medi...

5.3CVSS6.1AI score0.002EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/03 12:00 a.m.•7 views

CVE-2025-31127: Exposure of Sensitive Information to an Unauthorized Actor

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS5.8AI score0.002EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/03 12:00 a.m.•6 views

CVE-2025-31126: Exposure of Sensitive Information to an Unauthorized Actor

Element X iOS is a Matrix iOS Client provided by Element. In Element X iOS version between 1.6.13 and 25.03.7, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. This vulnerability ...

5.3CVSS5.9AI score0.002EPSS
SaveExploits0References1
Rows per page
Query Builder