CVE-2024-40656

2024-09-1100:15:11

[email protected]

web.nvd.nist.gov

connectionservicewrapper

confused deputy

local disclosure

user interaction

EPSS

Percentile

9.6%

JSON

In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.