103 matches found
element-web-1.11.81-1.1 on GA media (moderate)
element-web-1.11.81-1.1 on GA media Announcement ID: openSUSE-SU-2024:14407-1 Rating: moderate Cross-References: CVE-2024-47771 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
SUSE CVE-2024-47779
Element is a Matrix web client built using the Matrix React SDK. Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally,...
OPENSUSE-SU-2024:14407-1 element-web-1.11.81-1.1 on GA media
These are all security issues fixed in the element-web-1.11.81-1.1 package on the GA media of openSUSE Tumbleweed...
FreeBSD : element-web -- Potential exposure of access token via authenticated media (851ce3e4-8b03-11ef-84e9-901b0e9408dc)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 851ce3e4-8b03-11ef-84e9-901b0e9408dc advisory. Element team reports: Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can,...
CVE-2024-47779 Element Web vulnerable to potential exposure of access token via authenticated media
Element is a Matrix web client built using the Matrix React SDK. Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally,...
CVE-2024-47779 Element Web vulnerable to potential exposure of access token via authenticated media
Element is a Matrix web client built using the Matrix React SDK. Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally,...
CVE-2024-47779
CVE-2024-47779 affects Element Web (Matrix client) versions 1.11.70–1.11.80, where an issue in the non-shared codebase can expose access tokens to third parties under crafted conditions, with at least one vector identified via malicious widgets. The vulnerability is mitigated by upgrading to Elem...
CVE-2024-47779
Element is a Matrix web client built using the Matrix React SDK. Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally,...
CVE-2024-47779 Element Web vulnerable to potential exposure of access token via authenticated media
Element is a Matrix web client built using the Matrix React SDK. Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally,...
PT-2024-32811 · Element · Element Web
Name of the Vulnerable Software and Affected Versions: Element Web versions 1.11.70 through 1.11.80 Description: The issue is related to the exposure of access tokens to third parties under specially crafted conditions. At least one vector has been identified, involving malicious widgets, but oth...
element-web -- Potential exposure of access token via authenticated media
Element team reports: Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally, involving malicious widgets, but other vectors...
CVE-2024-47779: Exposure of Sensitive Information to an Unauthorized Actor
Element is a Matrix web client built using the Matrix React SDK. Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally,...
OPENSUSE-SU-2024:14289-1 element-web-1.11.75-1.1 on GA media
These are all security issues fixed in the element-web-1.11.75-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14242-1 element-web-1.11.73-1.1 on GA media
These are all security issues fixed in the element-web-1.11.73-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13055-1 element-web-1.11.36-1.1 on GA media
These are all security issues fixed in the element-web-1.11.36-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12884-1 element-web-1.11.30-1.1 on GA media
These are all security issues fixed in the element-web-1.11.30-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12823-1 element-web-1.11.26-1.1 on GA media
These are all security issues fixed in the element-web-1.11.26-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12375-1 element-web-1.11.8-1.1 on GA media
These are all security issues fixed in the element-web-1.11.8-1.1 package on the GA media of openSUSE Tumbleweed...