SUSE CVE-2017-5603

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Jitsi 2.5.5061 - 2.9.5544...

CVE-2022-43550

A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert an arbitrary URL which opens up the opportunity to remote execution...

Command injection

A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert an arbitrary URL which opens up the opportunity to remote execution...

CVE-2022-43550

A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert an arbitrary URL which opens up the opportunity to remote execution...

CVE-2022-43550

CVE-2022-43550 concerns the Jitsi Desktop/Windows flow where, before commit 8aa7be58522f4264078d54752aae5483bfd854b2, launching browsers on Windows could be coerced into loading an arbitrary URL, enabling a command-injection that could lead to remote code execution. Affected software is Jitsi whe...

CVE-2022-43550

A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert an arbitrary URL which opens up the opportunity to remote execution...

PT-2023-14253 · Jitsi · Jitsi

Name of the Vulnerable Software and Affected Versions: Jitsi versions prior to commit 8aa7be58522f4264078d54752aae5483bfd854b2 Description: A command injection issue exists when launching browsers on Windows, allowing an attacker to insert an arbitrary URL, which could lead to remote execution...

CVE-2022-43550

A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert an arbitrary URL which opens up the opportunity to remote execution...

Jitsi 命令注入漏洞

Jitsi is a free open source audio/video and chat communicator from Jitsi Open Source. A security vulnerability exists in Jitsi. An attacker can exploit the vulnerability to insert arbitrary URLs to gain remote code execution...

CVE-2022-36736

Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking attack via a crafted HTTP request. NOTE: this is disputed by the vendor...

CVE-2022-36736

Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking attack via a crafted HTTP request. NOTE: this is disputed by the vendor...

CVE-2022-36736

Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking attack via a crafted HTTP request. NOTE: this is disputed by the vendor...

Design/Logic Flaw

DISPUTED Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking attack via a crafted HTTP request. NOTE: this is disputed by the vendor...

CVE-2022-36736

Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking attack via a crafted HTTP request. NOTE: this is disputed by the vendor...

CVE-2022-36736

CVE-2022-36736 affects Jitsi (version 2.10.5550) with a clickjacking vulnerability in the web UI due to a crafted HTTP request. Several sources (NVD/Red Hat/CVE records, CNNVD, PT-Security) confirm the issue and its presence in 2.10.5550, though the vendor disputes it. Impact is described as enab...

Jitsi 安全漏洞

Jitsi is a free open source audio/video and chat communicator from Jitsi Open Source. A security vulnerability exists in the Jitsi jitsi-2.10.5550 version that stems from the inclusion of an issue in its Web UI that allows an attacker to perform a clickjacking attack via a crafted HTTP request...

8x8 Bounty: Jitsi Desktop Client RCE By Interacting with Malicious URL Schemes on Windows

A command injection vulnerability was found in Jitsi Desktop Client before commit 8aa7be58522f4264078d54752aae5483bfd854b2 on Windows. This vulnerability could allow an attacker to execute arbitrary code by interacting with malicious URL schemes when launching browsers. The vulnerability has been...

Malicious code in jitsi-spot-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f18e693e8f7db059c741352115c92a94d881931a0082e2a1a1648e43f74cb54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4033 Malicious code in jitsi-spot-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f18e693e8f7db059c741352115c92a94d881931a0082e2a1a1648e43f74cb54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

8x8 Bounty: Jitsi: Attacker is able to cast a vote using the Victim's name on the Polls

The poll feature used to send user JIDs and names included in protocol messages, rather than derive from the XMPP session of the sender. Consequently, anyone in the conference could send messages with fake senderId or voterId values, and arbitrarily forge polls and votes. Jitsi Security Advisory...