High severity7.5NVD Advisory· Published Oct 29, 2024· Updated Jun 17, 2026

CVE-2024-44080

Description

In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another participant contains a URL encoded in the expected format.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jitsi Meet/Jitsi Meetdescription
Jitsi/Jitsillm-fuzzy
Range: <2.0.9779
8x8/Jitsi Meet
cpe:2.3:a:8x8:jitsi_meet:*:*:*:*:*:*:*:*
Range: <2.0.9779

Patches

Vulnerability mechanics

References

github.com/jitsi/security-advisories/blob/master/advisories/JSA-2024-0002.mdnvdThird Party Advisory
github.com/jitsi/jitsi-meet/compare/jitsi-meet_9672...jitsi-meet_9673nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000