What is CVE-2024-51749?

CVE-2024-51749 is a low-severity vulnerability in Element-hq Element-web, classified under User Interface (UI) Misrepresentation of Critical Information. CVSS score: 3.5/10. Published 2024-11-12.

How severe is CVE-2024-51749?

Low severity. CVSS v3 base score is 3.5 out of 10.

Vulnerability in Element-hq Element-web

CVE-2024-51749

Element is a Matrix web client built using the Matrix React SDK. Versions of Element Web and Desktop earlier than 1.11.85 do not check if thumbnails for attachments, stickers and images are coherent. It is possible to add thumbnails to eve…

EPSS: 0.003 (24.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N.

Affected products

Element-hq Element-web — versions < 1.11.85

Weakness classification (CWE)

CWE-451 — User Interface (UI) Misrepresentation of Critical Information

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2024-51749?: CVE-2024-51749 is a low-severity vulnerability in Element-hq Element-web, classified under User Interface (UI) Misrepresentation of Critical Information. CVSS score: 3.5/10. Published 2024-11-12.
How severe is CVE-2024-51749?: Low severity. CVSS v3 base score is 3.5 out of 10.