CVE-2024-44730

The video conferencing software Mirotalk is vulnerable to an incorrect access control flaw in the handleDataChannelChat(dataMessage) function. This issue exists in versions prior to commit c21d58 and allows an attacker to forge chat messages by using an arbitrary sender name. No specific exploit ...