Skip to content
Noroxi

mirotalk records

4 published records for vendor mirotalk.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2024-44730
    36Monitor

    Incorrect access control in the function handleDataChannelChat(dataMessage) of Mirotalk before commit c21d58 allows attackers to forge chat

    CriticalCVSS 9.1No exploitEPSS 0%

    Oct 11, 2024

  • CVE-2024-44729
    30Monitor

    Incorrect access control in the component app/src/server.js of Mirotalk before commit 9de226 allows unauthenticated attackers without presen

    HighCVSS 7.5No exploitEPSS 0%

    Oct 11, 2024

  • CVE-2024-44734
    30Monitor

    Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a crafted roomAction

    HighCVSS 7.5No exploitEPSS 0%

    Oct 11, 2024

  • CVE-2023-27054
    24Monitor

    A cross-site scripting (XSS) vulnerability in MiroTalk P2P before commit f535b35 allows attackers to execute arbitrary web scripts or HTML v

    MediumCVSS 6.1No exploitEPSS 0%

    mirotalk · mirotalk p2pMar 22, 2023