CVE-2024-44080
In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a …
Published: 2024-10-29 · CVSS: 7.5 · CVSS 3.1
In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another participant contains a URL encoded in the expected format.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7