CyberRota Analysis
AI-GeneratedElement Web, a Matrix web client, is vulnerable to an issue where it renders untrusted homepage content from a homeserver using dangerouslySetInnerHTML, exposing users to potential phishing attacks. Although the content security policy mitigates JavaScript execution, it does not prevent the rendering of malicious HTML. Organizations using versions prior to 1.12.22 should prioritize updating to the latest version to safeguard against this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Element Web is a Matrix web client built using the Matrix React SDK. Prior to 1.12.22, EmbeddedPage in apps/web/src/components/structures/EmbeddedPage.tsx renders homeserver-supplied homepage content through dangerouslySetInnerHTML without passing it through sanitizedHtmlNode. A malicious homeserver can provide crafted HTML that Element Web renders on the homepage; the content security policy prevents JavaScript but not phishing HTML. This issue is fixed in version 1.12.22.