MiroTalk security vulnerabilities

MiroTalk is a simple, secure, and fast real-time videoconferencing software from the individual developer Miroslav Pejic. A security vulnerability exists in MiroTalk versions prior to 9de226 that stems from improper access control and allows an attacker to arbitrarily change a username by sending...

PT-2024-31230

Name of the Vulnerable Software and Affected Versions Mirotalk versions prior to commit 9de226 Description The issue is related to incorrect access control, allowing attackers to change usernames by sending a crafted roomAction request to the server. Recommendations For versions prior to commit...

CVE-2024-44734

Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a crafted roomAction request to the server...

CVE-2024-44734: Origin Validation Error

Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a crafted roomAction request to the server...