Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a crafted roomAction request to the server...
7.5CVSS6.9AI score0.00357EPSS
SaveExploits0References1
NVD•added 2024/10/11 5:15 p.m.•12 views
CVE-2024-44734
Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a crafted roomAction request to the server...