jitsi kayıtları
jitsi üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %14,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-1021 Improper Restriction of Rendered UI Layers or Frames1
- CWE-20 Improper Input Validation1
- CWE-345 Insufficient Verification of Data Authenticity1
- CWE-640 Weak Password Recovery Mechanism for Forgotten Password1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
53Planlayın | CVE-2021-26812Kavram kanıtı | Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module.jitsi · meet · CWE-79 | Orta6,1 | — | %97,2 | 14 Nis 2021 |
40Planlayın | CVE-2022-43550İstismar yok | A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows jitsi · jitsi · CWE-78 | Kritik9,8 | — | %1,8 | 9 Şub 2023 |
39İzleyin | CVE-2020-11878İstismar yok | The Jitsi Meet (aka docker-jitsi-meet) stack on Docker before stable-4384-1 uses default passwords (such as passw0rd) for system accounts.jitsi · meet · CWE-798 | Kritik9,8 | — | %1,3 | 17 Nis 2020 |
30İzleyin | CVE-2020-25019İstismar yok | jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is jitsi · meet electron · CWE-345 | Yüksek7,5 | — | %1,0 | 29 Ağu 2020 |
30İzleyin | CVE-2024-33530İstismar yok | In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings (that make use of a lobby) leads to the disclosure of the meetiCWE-640 | Yüksek7,5 | — | %0,8 | 2 May 2024 |
24İzleyin | CVE-2022-36736İstismar yok | Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking attack via a craftejitsi · jitsi · CWE-1021 | Orta6,1 | — | %0,7 | 8 Eyl 2022 |
23İzleyin | CVE-2017-5603İstismar yok | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, includjitsi · jitsi · CWE-20 | Orta5,9 | — | %1,6 | 9 Şub 2017 |
- CVE-2021-2681253Planlayın
Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module.
OrtaCVSS 6,1Kavram kanıtıEPSS %97jitsi · meet14 Nis 2021
- CVE-2022-4355040Planlayın
A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows
KritikCVSS 9,8İstismar yokEPSS %2jitsi · jitsi9 Şub 2023
- CVE-2020-1187839İzleyin
The Jitsi Meet (aka docker-jitsi-meet) stack on Docker before stable-4384-1 uses default passwords (such as passw0rd) for system accounts.
KritikCVSS 9,8İstismar yokEPSS %1jitsi · meet17 Nis 2020
- CVE-2020-2501930İzleyin
jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is
YüksekCVSS 7,5İstismar yokEPSS %1jitsi · meet electron29 Ağu 2020
- CVE-2024-3353030İzleyin
In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings (that make use of a lobby) leads to the disclosure of the meeti
YüksekCVSS 7,5İstismar yokEPSS %12 May 2024
- CVE-2022-3673624İzleyin
Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking attack via a crafte
OrtaCVSS 6,1İstismar yokEPSS %1jitsi · jitsi8 Eyl 2022
- CVE-2017-560323İzleyin
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, includ
OrtaCVSS 5,9İstismar yokEPSS %2jitsi · jitsi9 Şub 2017