Vulnerabilities

TI-2024-29663 CVE-2024-44081 · GHSA-g2hj-224j-7m2q

In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in…

MEDIUM 50

In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL en…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00749 Published 2024-10-29 No fix listed CWE-79

TI-2024-29662 CVE-2024-44080 · GHSA-vgwf-5fwc-xx64

In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was…

MEDIUM 40

In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another participant contains a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00534 Published 2024-10-29 No fix listed CWE-79

TI-2021-16600 CVE-2021-39215

Authentication Bypass: Forged Tokens Allow Access to Arbitrary Rooms

LOW 35

Jitsi Meet is an open source video conferencing application.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01235 Published 2021-09-15 Fixed in 2.0.5963 CWE-287

TI-2021-16590 CVE-2021-39205

DOM-based XSS/Content Spoofing via Prototype Pollution

LOW 33

Jitsi Meet is an open source video conferencing application.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.01226 Published 2021-09-15 Fixed in 2.0.6173 CWE-1321

TI-2021-12908 CVE-2021-33506 · GHSA-x6jp-2c5w-vpfg

jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that…