jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrict_room_creation is set by default. This can allow an attacker to circumvent conference moderation.
References
Link | Resource |
---|---|
https://github.com/jitsi/jitsi-meet/compare/5025...5026 | Patch Third Party Advisory |
https://github.com/jitsi/jitsi-meet/pull/9252/files | Patch Third Party Advisory |
https://github.com/jitsi/security-advisories/blob/master/advisories/JSA-2021-0001.md | Third Party Advisory |
Configurations
Information
Published : 2021-05-26 08:15
Updated : 2022-06-03 12:33
NVD link : CVE-2021-33506
Mitre link : CVE-2021-33506
JSON object : View
CWE
CWE-276
Incorrect Default Permissions
Products Affected
8x8
- jitsi_meet