The vulnerability of the image-sharing function in Jitsi Meet software allows a hacker to upload arbitrary GIF files.

The vulnerability of the image-sharing function in Jitsi Meet software for video conferencing involves a lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to upload arbitrary GIF files using giphy...

CVE-2024-44080

In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another participant contains a URL encoded in the expected format...

CVE-2024-44081

In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL encoded in the expected format...

CVE-2024-44081

In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL encoded in the expected format...

CVE-2024-44080

In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another participant contains a URL encoded in the expected format...

Jitsi Meet 安全漏洞

Jitsi Meet is a set of open source projects from Jitsi Open Source. Enabling users to use and deploy a video conferencing platform with state-of-the-art video quality and features. A security vulnerability previously existed in Jitsi Meet version 2.0.9779, which arose from the fact that the abili...

CVE-2024-44080

In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another participant contains a URL encoded in the expected format...

CVE-2024-44080

In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another participant contains a URL encoded in the expected format...

Jitsi Meet 安全漏洞

Jitsi Meet is a set of open source projects from Jitsi Open Source. enabling users to use and deploy a video conferencing platform with state-of-the-art video quality and features. A security vulnerability previously present in Jitsi Meet version 2.0.9779 stems from the fact that the ability to...

CVE-2024-44081

CVE-2024-44081 affects Jitsi Meet before 2.0.9779, where the video-file sharing feature is implemented insecurely, causing a client to load videos from an arbitrary URL when a message from another participant contains a URL in the expected encoded format. This vulnerability can enable loading arb...

CVE-2024-44081

In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL encoded in the expected format...

CVE-2024-44080

CVE-2024-44080 affects Jitsi Meet prior to 2.0.9779. The giphy image-sharing feature was implemented insecurely, allowing a client to load GIFs from an arbitrary URL when a participant’s message contains a URL encoded in the expected format. The Red Hat entry reiterates this description. Practica...

Beware: Fake Google Meet Pages Deliver Infostealers in Ongoing ClickFix Campaign

Threat actors are leveraging fake Google Meet web pages as part of an ongoing malware campaign dubbed ClickFix to deliver infostealers targeting Windows and macOS systems. "This tactic involves displaying fake error messages in web browsers to deceive users into copying and executing a given...

ClickFix Attack: Fake Google Meet Alerts Install Malware on Windows, macOS

Protect yourself from the ClickFix attack! Learn how cybercriminals are using fake Google Meet pages to trick users…...

PT-2024-8700 · 8X8 · Jitsi Meet

Name of the Vulnerable Software and Affected Versions: Jitsi Meet versions prior to 2.0.9779 Description: The issue is related to the insecure implementation of the video file sharing functionality in Jitsi Meet. This allows a remote attacker to load arbitrary video files if a message from anothe...

PT-2024-7557 · Unknown · Jitsi Meet

Name of the Vulnerable Software and Affected Versions: Jitsi Meet versions prior to 2.0.9779 Description: The issue is related to the insecure implementation of the image sharing functionality using giphy in Jitsi Meet. This allows clients to load GIFs from any arbitrary URL if a message from...

MAL-2024-2227 Malicious code in down_load_epub_a_not_so_meet_cute_h2910p (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-33530

In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings that make use of a lobby leads to the disclosure of the meeting password when a user is invited to a call after waiting in the lobby...

Jitsi Meet 安全漏洞

Jitsi Meet is a group of open source projects enabling users to use and deploy a video conferencing platform with state-of-the-art video quality and features. A security vulnerability exists in versions prior to Jitsi Meet 9391 that stems from allowing the meeting password to be disclosed when...

CVE-2024-33530

In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings that make use of a lobby leads to the disclosure of the meeting password when a user is invited to a call after waiting in the lobby...