What is CVE-2024-51750?

CVE-2024-51750 is a medium-severity vulnerability in Element-Hq Element-Web, classified under CWE-248. CVSS score: 5.0/10. Published 2024-11-12.

How severe is CVE-2024-51750?

Medium severity. CVSS v3 base score is 5.0 out of 10.

Vulnerability in Element-Hq Element-Web

CVE-2024-51750

Element is a Matrix web client built using the Matrix React SDK. A malicious homeserver can send invalid messages over federation which can prevent Element Web and Desktop from rendering single messages or the entire room containing them. This was patched in Element Web and Desktop 1.11.85.

EPSS: 0.005 (38.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.0 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L.

Affected products

Element-hq Element-web — versions < 1.11.85

Weakness classification (CWE)

CWE-248

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2024-51750?: CVE-2024-51750 is a medium-severity vulnerability in Element-Hq Element-Web, classified under CWE-248. CVSS score: 5.0/10. Published 2024-11-12.
How severe is CVE-2024-51750?: Medium severity. CVSS v3 base score is 5.0 out of 10.