Priority HIGH 70
Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordings_path via the record request filename.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00464 · Published 2026-10-14 · No fix listed CWE-22
Priority LOW 24
A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00257 · Published 2026-10-12 · No fix listed CWE-259
Priority MEDIUM 45
A weakness has been identified in meetecho janus-gateway up to 1.4.2.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00192 · Published 2026-10-12 · No fix listed CWE-362
Priority LOW 29
janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00969 · Published 2021-12-16 · Fixed in 0.11.7 CWE-79
Priority LOW 26
janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00845 · Published 2021-11-27 · Fixed in 0.11.6 CWE-79
Priority MEDIUM 46
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01897 · Published 2020-06-15 · No fix listed CWE-120
Priority MEDIUM 47
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02345 · Published 2020-06-15 · No fix listed CWE-120
Priority MEDIUM 47
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02646 · Published 2020-06-10 · No fix listed CWE-787
Priority LOW 37
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02427 · Published 2020-06-10 · No fix listed CWE-476
Priority LOW 37
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02196 · Published 2020-06-10 · No fix listed CWE-908
Priority LOW 37
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02365 · Published 2020-06-10 · No fix listed CWE-476
Priority LOW 35
An issue was discovered in Janus through 0.9.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00967 · Published 2020-03-14 · No fix listed CWE-667
Priority MEDIUM 45
An issue was discovered in Janus through 0.9.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01418 · Published 2020-03-14 · No fix listed CWE-706
Priority LOW 27
An issue was discovered in Janus through 0.9.1.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00649 · Published 2020-03-14 · No fix listed CWE-362
Priority LOW 22
An issue was discovered in Janus through 0.9.1.
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00468 · Published 2020-03-14 · No fix listed CWE-362
Priority LOW 20
An issue was discovered in Janus through 0.9.1.
CVSS 3.1MEDIUM 4.2· Network · No auth · User interaction · EPSS 0.00466 · Published 2020-03-14 · No fix listed CWE-362
THREATIST.IORead the docs