GCVE - cpe:2.3:a:8x8:jitsi_meet:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:8x8:jitsi_meet:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	8X8 (`4420f393-f879-5f83-aa4c-079be49b16d9`)
Product	Jitsi Meet (`a9be5448-8fdc-599f-8a11-b0e2f6002852`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:bitbucket/instando/jitsi-meet`	purl2cpe	2026-06-01 10:12:40.047228
`pkg:github/jitsi/jitsi-meet`	purl2cpe	2026-06-01 10:12:40.047229
`pkg:maven/org.webjars.npm/github-com-jitsi-jitsi-meet`	purl2cpe	2026-06-01 10:12:40.047231
`pkg:rpm/opensuse/jitsi-meet`	purl2cpe	2026-06-01 10:12:40.047233

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-44081`	vulnerable	2026-06-08 06:45:53.604887	Details available In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL encoded in the expected format. Published: 2024-10-29T00:00:00.000Z Updated: 2024-10-30T14:47:10.217Z Open on db.gcve.eu Reference links https://github.com/jitsi/jitsi-meet/compare/jitsi-meet_9672...jitsi-meet_9673 https://github.com/jitsi/security-advisories/blob/master/advisories/JSA-2024-0003.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-44080`	vulnerable	2026-06-08 06:45:53.604443	Details available In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another participant contains a URL encoded in the expected format. Published: 2024-10-29T00:00:00.000Z Updated: 2024-10-30T14:52:36.024Z Open on db.gcve.eu Reference links https://github.com/jitsi/jitsi-meet/compare/jitsi-meet_9672...jitsi-meet_9673 https://github.com/jitsi/security-advisories/blob/master/advisories/JSA-2024-0002.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-39205`	vulnerable	2026-06-08 05:33:49.196028	DOM-based XSS/Content Spoofing via Prototype Pollution MEDIUM (6.8) Jitsi Meet is an open source video conferencing application. Versions prior to 2.0.6173 are vulnerable to client-side cross-site scripting via injecting properties into JSON objects that were not properly escaped. There are no known incidents related to this vulnerability being exploited in the wild. This issue is fixed in Jitsi Meet version 2.0.6173. There are no known workarounds aside from upgrading. Published: 2021-09-15T17:15:12.000Z Updated: 2024-08-04T01:58:18.260Z Open on db.gcve.eu Reference links https://github.com/jitsi/jitsi-meet/security/advisories/GHSA-6582-8v9q-v3fg https://github.com/jitsi/jitsi-meet/pull/9320 https://github.com/jitsi/jitsi-meet/pull/9404 https://hackerone.com/reports/1214493	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-33506`	vulnerable	2026-06-08 05:32:11.532873	Details available jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrict_room_creation is set by default. This can allow an attacker to circumvent conference moderation. Published: 2021-05-26T14:46:30.000Z Updated: 2024-08-03T23:50:42.969Z Open on db.gcve.eu Reference links https://github.com/jitsi/jitsi-meet/pull/9252/files https://github.com/jitsi/jitsi-meet/compare/5025...5026 https://github.com/jitsi/security-advisories/blob/master/advisories/JSA-2021-0001.md	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.