jitsi

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

jitsi records in CISA KEV

No jitsi vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Meet · all components

TI-2021-08445 CVE-2021-26812 · GHSA-h3rc-fmj6-ghxh

HIGH 72

Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.97157 Published 2021-04-14 No fix listed CWE-79

TI-2020-09546 CVE-2020-11878 · GHSA-mf23-9v58-x7jv

MEDIUM 45

The Jitsi Meet (aka docker-jitsi-meet) stack on Docker before stable-4384-1 uses default passwords (such as passw0rd) for system accounts.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0132 Published 2020-04-17 No fix listed CWE-798