Vulnerability Description
In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another participant contains a URL encoded in the expected format.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| 8X8 | Jitsi Meet | < 2.0.9779 |
Related Weaknesses (CWE)
References
- https://github.com/jitsi/jitsi-meet/compare/jitsi-meet_9672...jitsi-meet_9673Product
- https://github.com/jitsi/security-advisories/blob/master/advisories/JSA-2024-000Third Party Advisory
FAQ
What is CVE-2024-44080?
CVE-2024-44080 is a vulnerability with a CVSS score of 7.5 (HIGH). In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another pa...
How severe is CVE-2024-44080?
CVE-2024-44080 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-44080?
Check the references section above for vendor advisories and patch information. Affected products include: 8X8 Jitsi Meet.