element-web-1.11.81-1.1 on GA media (moderate)

element-web-1.11.81-1.1 on GA media Announcement ID: openSUSE-SU-2024:14407-1 Rating: moderate Cross-References: CVE-2024-47771 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

SUSE CVE-2024-47779

Element is a Matrix web client built using the Matrix React SDK. Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally,...

OPENSUSE-SU-2024:14407-1 element-web-1.11.81-1.1 on GA media

These are all security issues fixed in the element-web-1.11.81-1.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : element-web -- Potential exposure of access token via authenticated media (851ce3e4-8b03-11ef-84e9-901b0e9408dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 851ce3e4-8b03-11ef-84e9-901b0e9408dc advisory. Element team reports: Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can,...

CVE-2024-47779

CVE-2024-47779 affects Element Web (Matrix client) versions 1.11.70–1.11.80, where an issue in the non-shared codebase can expose access tokens to third parties under crafted conditions, with at least one vector identified via malicious widgets. The vulnerability is mitigated by upgrading to Elem...

CVE-2024-47779 Element Web vulnerable to potential exposure of access token via authenticated media

Element is a Matrix web client built using the Matrix React SDK. Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally,...

CVE-2024-47779 Element Web vulnerable to potential exposure of access token via authenticated media

Element is a Matrix web client built using the Matrix React SDK. Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally,...

CVE-2024-47779 Element Web vulnerable to potential exposure of access token via authenticated media

Element is a Matrix web client built using the Matrix React SDK. Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally,...

PT-2024-32811 · Element · Element Web

Name of the Vulnerable Software and Affected Versions: Element Web versions 1.11.70 through 1.11.80 Description: The issue is related to the exposure of access tokens to third parties under specially crafted conditions. At least one vector has been identified, involving malicious widgets, but oth...

element-web -- Potential exposure of access token via authenticated media

Element team reports: Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally, involving malicious widgets, but other vectors...

OPENSUSE-SU-2024:14289-1 element-web-1.11.75-1.1 on GA media

These are all security issues fixed in the element-web-1.11.75-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14242-1 element-web-1.11.73-1.1 on GA media

These are all security issues fixed in the element-web-1.11.73-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12295-1 element-web-1.11.4-1.1 on GA media

These are all security issues fixed in the element-web-1.11.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12375-1 element-web-1.11.8-1.1 on GA media

These are all security issues fixed in the element-web-1.11.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12823-1 element-web-1.11.26-1.1 on GA media

These are all security issues fixed in the element-web-1.11.26-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13055-1 element-web-1.11.36-1.1 on GA media

These are all security issues fixed in the element-web-1.11.36-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12888-1 element-web-1.11.30-2.1 on GA media

These are all security issues fixed in the element-web-1.11.30-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11790-1 element-web-1.9.9-1.1 on GA media

These are all security issues fixed in the element-web-1.9.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12884-1 element-web-1.11.30-1.1 on GA media

These are all security issues fixed in the element-web-1.11.30-1.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : element-web -- Cross site scripting in Export Chat feature (c70c3dc3-258c-11ee-b37b-901b0e9408dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c70c3dc3-258c-11ee-b37b-901b0e9408dc advisory. - Since the Export Chat feature generates a separate document, an attacker can only inject code run fro...