Unrated severityNVD Advisory· Published Aug 29, 2020· Updated Nov 17, 2025
CVE-2020-25019
CVE-2020-25019
Description
jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- jitsi-meet-electron/jitsi-meet-electrondescription
- Range: <2.3.0
Patches
Vulnerability mechanics
References
5- github.com/jitsi/jitsi-meet-electron/commit/ca1eb702507fdc4400fe21c905a9f85702f92a14mitre
- github.com/jitsi/jitsi-meet-electron/releases/tag/v2.3.0mitre
- github.com/jitsi/jitsi-meet-electron/security/advisories/GHSA-x4h8-fhrp-pm3pmitre
- github.com/jitsi/security-advisories/blob/master/advisories/JSA-2020-0001.mdmitre
- security.stackexchange.com/questions/225799mitre
News mentions
0No linked articles in our index yet.