Low severity · published Nov 12, 2024
CVE-2024-51749
Element's thumbnails can be abused to misrepresent the content of an attachment
3.5
CVSS
0.4%
EPSS
No
On KEV
Description
Element is a Matrix web client built using the Matrix React SDK. Versions of Element Web and Desktop earlier than 1.11.85 do not check if thumbnails for attachments, stickers and images are coherent. It is possible to add thumbnails to events trigger a file download once clicked. Fixed in element-web 1.11.85.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
element-web · element-hq
< 1.11.85 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-51749
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-51749
github.com
https://github.com/element-hq/element-web/commit/a00c343435d633e64de2c0548217aa611c7bbef5
github.com
https://github.com/element-hq/element-web/security/advisories/GHSA-5486-384g-mcx2
More from element-web
7.0
CVE-2024-47779
Element Web vulnerable to potential exposure of access token via authenticated media
5.3
CVE-2026-55850
Element Web: A malicious homeserver can inject HTML in Element Web using its homepage
5.0
CVE-2024-51750
Element allows a malicious homeserver can modify events leading to unrenderable events or rooms
3.8
CVE-2025-32026
Element Web could load a malicious instance of Element Call leaking media encryption keys
2.7
CVE-2025-59161
In Element Web and Element Desktop, a malicious room can hide an unrelated room and cause it to be left when the malicious room is left