172 matches found
CVE-2021-33506
jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrictroomcreation is set by default. This can allow an attacker to circumvent conference moderation...
CVE-2021-33506
jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrictroomcreation is set by default. This can allow an attacker to circumvent conference moderation...
Design/Logic Flaw
jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrictroomcreation is set by default. This can allow an attacker to circumvent conference moderation...
CVE-2021-33506
jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrictroomcreation is set by default. This can allow an attacker to circumvent conference moderation...
CVE-2021-33506
CVE-2021-33506 affects jitsi-meet-prosody in Jitsi Meet prior to 2.0.5963-1, where restrict_room_creation is not enabled by default. This misconfiguration can allow an attacker to circumvent conference moderation. Connected sources confirm the issue across multiple vectors (Red Hat CVE page and C...
Jitsi Meet jitsi-meet-prosody安全漏洞
8X8 Docker Jitsi Meet is a tool for building Jitsi Meet videoconferencing solutions in Docker from 8x8 USA. A security vulnerability exists in jitsi-meet-prosody in versions of Jitsi Meet prior to 5026, which stems from an uncertainty in the default setting of restrictroomcreation. No detailed...
CVE-2021-26812
Cross Site Scripting XSS in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application...
CVE-2021-26812
Cross Site Scripting XSS in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application...
Cross site scripting
Cross Site Scripting XSS in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application...
CVE-2021-26812
Cross Site Scripting XSS in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application...
CVE-2021-26812
The connected Nuclei template confirms a Cross-Site Scripting (XSS) vulnerability in Moodle Jitsi Meet plugin versions 2.7–2.8.3, exploitable via the sessionpriv.php module. An attacker can craft a malicious URL that, when clicked by a user, executes JavaScript in the victim’s browser. Reported i...
8X8 Docker Jitsi Meet 跨站脚本漏洞
8X8 Docker Jitsi Meet is a tool for building Jitsi Meet videoconferencing solutions in Docker from 8x8 USA. A cross-site scripting vulnerability exists in Jitsi Meet versions 2.7 through 2.8.3, which originates in the sessionprivi .php module...
8x8 Bounty: Any meeting chat history can be read and modified by an arbitrary user
A vulnerability existed where a JaaS user could read & modify the chat history of an 8x8 Meet conference. It was limited by the fact that the meeting UUID was required to be known. The fix was promptly deployed to production. A vulnerability in an API accessible through the jaas.8x8.vc white-labe...
CVE-2020-25019
jitsi-meet-electron aka Jitsi Meet Electron before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances...
Xxe
jitsi-meet-electron aka Jitsi Meet Electron before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances...
CVE-2020-25019
CVE-2020-25019 affects jitsi-meet-electron (Jitsi Meet Electron) up to version 2.3.0. The vulnerability arises when the Electron shell.openExternal function is invoked without verifying that the target URL is http or https, in certain circumstances. Impact details are not fully elaborated in the ...
8x8 Docker Jitsi Meet Trust Management Issues Vulnerability
8x8 Docker Jitsi Meet is a tool for building Jitsi Meet video conferencing solutions in Docker from 8x8 USA. A security vulnerability exists in previous versions of 8x8 Docker Jitsi Meet docker-jitsi-meet stable-4384-1, which stems from the use of default passwords e.g. passw0rd for system...
CVE-2020-11878
The Jitsi Meet aka docker-jitsi-meet stack on Docker before stable-4384-1 uses default passwords such as passw0rd for system accounts...