Jitsi Meet vulnerabilities

2 known vulnerabilities in Jitsi Meet from 8x8. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  meet: Improper Neutralization of Input During Web Page Generation

  CVE-2024-44081Oct 29, 2024Jitsi

  In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL encoded in the expected format.

• 7.5 High severity

  meet: Improper Neutralization of Input During Web Page Generation

  CVE-2024-44080Oct 29, 2024Jitsi

  In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another participant contains a URL encoded in the expected format.