Mirotalk vulnerabilities
We track 3 vulnerabilities in Mirotalk products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2024.
3vulnerabilities
1critical
2high
0exploited
8.0average CVSS score
Latest Mirotalk vulnerabilities
- 7.5 High severity
mirotalk_p2p: Origin Validation Error
Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a crafted roomAction request to the server.
- 9.1 Critical severity
mirotalk_p2p: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
Incorrect access control in the function handleDataChannelChat(dataMessage) of Mirotalk before commit c21d58 allows attackers to forge chat messages using an arbitrary sender name.
- 7.5 High severity
mirotalk_p2p: Incorrect Permission Assignment for Critical Resource
Incorrect access control in the component app/src/server.js of Mirotalk before commit 9de226 allows unauthenticated attackers without presenter privileges to arbitrarily eject users from a meeting.