Critical severity9.8NVD Advisory· Published Oct 29, 2024· Updated Jun 17, 2026

CVE-2024-44081

Description

In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL encoded in the expected format.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jitsi Meet/Jitsi Meetdescription
Jitsi/Jitsi Meetllm-fuzzy
Range: <2.0.9779
8x8/Jitsi Meet
cpe:2.3:a:8x8:jitsi_meet:*:*:*:*:*:*:*:*
Range: <2.0.9779

Patches

Vulnerability mechanics

References

github.com/jitsi/jitsi-meet/compare/jitsi-meet_9672...jitsi-meet_9673nvdPatch
github.com/jitsi/security-advisories/blob/master/advisories/JSA-2024-0003.mdnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000