172 matches found
CVE-2020-11878
CVE-2020-11878 affects the Jitsi Meet docker-jitsi-meet stack prior to stable-4384-1, where system accounts used default passwords (e.g., passw0rd). The vulnerability is documented across multiple sources (NVD/Red Hat/CNVD/OSV), with high to critical severity in CVSS metrics. Impact is authentica...
CVE-2020-11878
The Jitsi Meet aka docker-jitsi-meet stack on Docker before stable-4384-1 uses default passwords such as passw0rd for system accounts...
8x8: Outdated Coturn is vulnerable to known vulnerabilities (High)
Jitsi had several CoTurn servers that needed improvements to their access configurations and updated...
8x8: Disclosure of Users Information On Wordpress Api [https://jitsi.org/]
Jitsi was running a default WordPress site that had not yet been hardened to prevent user enumeration via the API...
Updated jitsi packages fix security vulnerability
An incorrect implementation of XEP-0280: Message Carbons in Jitsi and other XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks CVE-2017-5603...
MGASA-2017-0049 Updated jitsi packages fix security vulnerability
An incorrect implementation of XEP-0280: Message Carbons in Jitsi and other XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks CVE-2017-5603...
Jitsi User Impersonation Vulnerability
Jitsi is an open source, secure ZRTP encrypted, high quality SIP/XMPP video calling, conferencing, chatting, desktop sharing, file transferring. It can be installed on your favorite operating system and supports multiple IM networks. Jitsi suffers from a user impersonation vulnerability. An...
XMPP Clients User Impersonation Vulnerability
Exploit for multiple platform in category local exploits Multiple XMPP Clients User Impersonation Vulnerability Summary ------- An incorrect implementation of XEP-0280: Message Carbons0 in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerabl...
Design/Logic Flaw
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Jitsi 2.5.5061 - 2.9.5544...
CVE-2017-5603
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Jitsi 2.5.5061 - 2.9.5544...
CVE-2017-5603
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Jitsi 2.5.5061 - 2.9.5544...