Skip to content
OpenAdvisories

Product · element-hq

element-call

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.9

    Element Call exposes shared passwords in logs

    Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Element Call `SPA` logs the `password` URL query parameter. When a user submits an error report, called a rageshake, these logs are shared with the applic…