Element Desktop
Approved changes feed: RSS · Atom
cpe:2.3:a:element-hq:element-desktop:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Element Hq (3b16b3ba-f167-5a48-b62a-dc4536b16c63) |
|---|---|
| Product | Element Desktop (ad525027-d60e-5af8-8293-9547c1e44d0e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-47771 |
vulnerable | 2026-06-08 06:48:13.141074 |
Element Desktop vulnerable to potential exposure of access token via authenticated media
Element Desktop is a Matrix client for desktop platforms. Element Desktop versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally, involving malicious widgets, but other vectors may exist. Users are strongly advised to upgrade to version 1.11.81 to remediate the issue. As a workaround, avoid granting permissions to untrusted widgets.
Published: 2024-10-15T15:02:54.059Z
Updated: 2024-10-15T17:28:19.064Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.