writeups.xyz / Remote Code Execution on Element Desktop Application using Node Integration in Sub Frames Bypass - CVE-2022-23597

Submitter : c2a

Date: 13 August 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• XSS

Programs :

• Matrix (Element)

Authors :

• S1r1us (@S1r1u5_)
• Maxwell Garrett (@TheGrandPew)

Link :
https://blog.electrovolt.io/posts/element-rce/