Lucene search

Meet Security Vulnerabilities

cve

CVE-2020-11878

The Jitsi Meet (aka docker-jitsi-meet) stack on Docker before stable-4384-1 uses default passwords (such as passw0rd) for system accounts.

9.8CVSS

9.5AI Score

0.002EPSS

2020-04-17 04:15 PM

106

cve

CVE-2021-26812

Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application.

6.1CVSS

6AI Score

0.005EPSS

2021-04-14 02:15 PM