{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"low"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright 2024 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"SUSE CVE-2024-51749","title":"Title"},{"category":"description","text":"Element is a Matrix web client built using the Matrix React SDK. Versions of Element Web and Desktop earlier than 1.11.85 do not check if thumbnails for attachments, stickers and images are coherent. It is possible to add thumbnails to events trigger a file download once clicked. Fixed in element-web 1.11.85.","title":"Description of the CVE"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"CVE-2024-51749","url":"https://www.suse.com/security/cve/CVE-2024-51749"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 1233337 for CVE-2024-51749","url":"https://bugzilla.suse.com/1233337"}],"title":"SUSE CVE CVE-2024-51749","tracking":{"current_release_date":"2025-02-16T04:02:11Z","generator":{"date":"2024-11-14T00:18:34Z","engine":{"name":"cve-database.git:bin/generate-csaf-vex.pl","version":"1"}},"id":"CVE-2024-51749","initial_release_date":"2024-11-14T00:18:34Z","revision_history":[{"date":"2024-11-14T00:18:34Z","number":"2","summary":"Current version"},{"date":"2025-01-01T00:26:51Z","number":"3","summary":"Current version"},{"date":"2025-02-14T04:09:35Z","number":"4","summary":"Current version"},{"date":"2025-02-16T04:02:11Z","number":"5","summary":"Current version"}],"status":"interim","version":"5"}}}