MiroTalk 安全漏洞

MiroTalk is a simple, secure, and fast real-time video conferencing software from the individual developer Miroslav Pejic. A security vulnerability exists in Mirotalk that stems from incorrect access control in the handleDataChannelChatdataMessage function...

CVE-2024-44734

Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a crafted roomAction request to the server...

CVE-2024-44731

Mirotalk before commit 9de226 was discovered to contain a DOM-based cross-site scripting XSS vulnerability which allows attackers to execute arbitrary code via sending crafted payloads in messages to other users over RTC connections...

CVE-2024-44734

Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a crafted roomAction request to the server...

CVE-2024-44730

Incorrect access control in the function handleDataChannelChatdataMessage of Mirotalk before commit c21d58 allows attackers to forge chat messages using an arbitrary sender name...

MiroTalk 安全漏洞

MiroTalk is a simple, secure, and fast real-time videoconferencing software from the individual developer Miroslav Pejic. A security vulnerability exists in MiroTalk versions prior to 9de226 that stems from improper access control and allows an attacker to arbitrarily change a username by sending...

CVE-2024-44734

The CVE-2024-44734 vulnerability affects Mirotalk/MiroTalk prior to commit 9de226. The root cause is improper access control in handling roomAction requests, enabling an attacker to arbitrarily change usernames on the server. This is described consistently across multiple sources (NVD, Red Hat se...

CVE-2023-27054

A cross-site scripting XSS vulnerability in MiroTalk P2P before commit f535b35 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the settings module...

CVE-2023-27054

A cross-site scripting XSS vulnerability in MiroTalk P2P before commit f535b35 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the settings module...

Cross site scripting

A cross-site scripting XSS vulnerability in MiroTalk P2P before commit f535b35 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the settings module...

CVE-2023-27054

A cross-site scripting XSS vulnerability in MiroTalk P2P before commit f535b35 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the settings module...

CVE-2023-27054

A cross-site scripting XSS vulnerability in MiroTalk P2P before commit f535b35 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the settings module...

MiroTalk P2P 跨站脚本漏洞

MiroTalk P2P is a simple, secure and fast real-time video conferencing software from MiroTalk. A security vulnerability exists in previous versions of MiroTalk P2P f535b35 that stems from the presence of a cross-site scripting XSS vulnerability, which can be exploited by an attacker to inject a...

CVE-2023-27054

CVE-2023-27054 concerns a cross-site scripting (XSS) flaw in MiroTalk P2P, specifically in the settings module where a crafted payload injected into the Name parameter can execute arbitrary web scripts or HTML. The vulnerability arises from the handling of the Name field prior to the commit f535b...