4 matches found
EUVD-2022-46547
Malicious code in bioql PyPI...
CVE-2022-36736
Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking attack via a crafted HTTP request. NOTE: this is disputed by the vendor...
PT-2023-14253
Name of the Vulnerable Software and Affected Versions Jitsi versions prior to commit 8aa7be58522f4264078d54752aae5483bfd854b2 Description A command injection issue exists when launching browsers on Windows, allowing an attacker to insert an arbitrary URL, which could lead to remote execution...
PT-2017-16608
Name of the Vulnerable Software and Affected Versions Jitsi versions 2.5.5061 through 2.9.5544 Description The issue is related to an incorrect implementation of XEP-0280: Message Carbons in multiple XMPP clients, allowing a remote attacker to impersonate any user in the vulnerable application's...