← Back

CVE-2024-51750

nvd nist
Published: Nov 12, 2024Modified: Jun 17, 2026Deferred

JSON object

Loading...
5.0
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
Exploitability: 3.1 / Impact: 1.4
Source: security-advisories@github.com (Secondary)

Description

Element is a Matrix web client built using the Matrix React SDK. A malicious homeserver can send invalid messages over federation which can prevent Element Web and Desktop from rendering single messages or the entire room containing them. This was patched in Element Web and Desktop 1.11.85.

Related CWEs

CWE-248
Uncaught Exception
An exception is thrown from a function, but it is not caught.

References (2)

Source: security-advisories@github.com
Source: security-advisories@github.com

Timeline

No history available yet.