CVE-2024-44080

Jitsi Meet versions prior to 2.0.9779 are vulnerable to an insecure implementation of the giphy image-sharing functionality. A remote attacker can exploit this by sending a message containing a URL encoded in the expected format, forcing clients to load GIFs from any arbitrary URL . This vulnerab...

CVE-2024-44081

In Jitsi Meet versions prior to 2.0.9779 , an insecure implementation of the video file sharing functionality allows a remote attacker to force clients to load videos from an arbitrary URL . This occurs if a message from another participant contains a URL encoded in the expected format. The vulne...

CVE-2024-44080

In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another participant contains a URL encoded in the expected format...

Jitsi Meet 安全漏洞

Jitsi Meet is a set of open source projects from Jitsi Open Source. enabling users to use and deploy a video conferencing platform with state-of-the-art video quality and features. A security vulnerability previously present in Jitsi Meet version 2.0.9779 stems from the fact that the ability to...

CVE-2024-44081: Improper Neutralization of Input During Web Page Generation

In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL encoded in the expected format...

CVE-2024-44080: Improper Neutralization of Input During Web Page Generation

In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another participant contains a URL encoded in the expected format...

Beware: Fake Google Meet Pages Deliver Infostealers in Ongoing ClickFix Campaign

Threat actors are leveraging fake Google Meet web pages as part of an ongoing malware campaign dubbed ClickFix to deliver infostealers targeting Windows and macOS systems. "This tactic involves displaying fake error messages in web browsers to deceive users into copying and executing a given...

ClickFix Attack: Fake Google Meet Alerts Install Malware on Windows, macOS

Protect yourself from the ClickFix attack! Learn how cybercriminals are using fake Google Meet pages to trick users…...

PT-2024-8700 · 8X8 · Jitsi Meet

Name of the Vulnerable Software and Affected Versions: Jitsi Meet versions prior to 2.0.9779 Description: The issue is related to the insecure implementation of the video file sharing functionality in Jitsi Meet. This allows a remote attacker to load arbitrary video files if a message from anothe...

PT-2024-7557 · Unknown · Jitsi Meet

Name of the Vulnerable Software and Affected Versions: Jitsi Meet versions prior to 2.0.9779 Description: The issue is related to the insecure implementation of the image sharing functionality using giphy in Jitsi Meet. This allows clients to load GIFs from any arbitrary URL if a message from...

MAL-2024-2227 Malicious code in down_load_epub_a_not_so_meet_cute_h2910p (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-33530

In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings that make use of a lobby leads to the disclosure of the meeting password when a user is invited to a call after waiting in the lobby...

Jitsi Meet 安全漏洞

Jitsi Meet is a group of open source projects enabling users to use and deploy a video conferencing platform with state-of-the-art video quality and features. A security vulnerability exists in versions prior to Jitsi Meet 9391 that stems from allowing the meeting password to be disclosed when...

CVE-2024-33530: Weak Password Recovery Mechanism for Forgotten Password

In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings that make use of a lobby leads to the disclosure of the meeting password when a user is invited to a call after waiting in the lobby...

CVE-2024-33530

In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings that make use of a lobby leads to the disclosure of the meeting password when a user is invited to a call after waiting in the lobby...

CVE-2024-33530

Versions of Jitsi Meet prior to 9391 are vulnerable to a logic flaw in password-protected meetings that utilize a lobby. This flaw leads to the disclosure of the meeting password when a user is invited to a call after waiting in the lobby. An attacker may exploit this to retrieve meeting password...

CVE-2024-33530

In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings that make use of a lobby leads to the disclosure of the meeting password when a user is invited to a call after waiting in the lobby...

Webinar and Video Conference with Jitsi Meet < 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Webinar and Video Conference with Jitsi Meet plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-30437

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPPOOL Webinar and Video Conference with Jitsi Meet allows Stored XSS.This issue affects Webinar and Video Conference with Jitsi Meet: from n/a through 2.6.3...

CVE-2024-30437 WordPress Webinar and Video Conference with Jitsi Meet plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPPOOL Webinar and Video Conference with Jitsi Meet allows Stored XSS.This issue affects Webinar and Video Conference with Jitsi Meet: from n/a through 2.6.3...