Approved changes feed: RSS · Atom

cpe:2.3:a:jitsi:meet:*:*:*:*:*:moodle:*:*

part: a version: * update: *

VendorJitsi (cfece043-1904-5c0e-99a8-c014e18f945e)
ProductMeet (2a3a05f3-3bd9-572d-9695-886106b97242)
Edition*
Language*
Software edition*
Target softwaremoodle
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jitsi/jitsi-meet purl2cpe 2026-06-01 10:12:41.836170
pkg:rpm/opensuse/jitsi-meet purl2cpe 2026-06-01 10:12:41.836172
pkg:sourceforge/jitsi-meet.mirror purl2cpe 2026-06-01 10:12:41.836173

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-33530 vulnerable 2026-06-08 06:37:31.546937 Details available
In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings (that make use of a lobby) leads to the disclosure of the meeting password when a user is invited to a call after waiting in the lobby.
Published: 2024-05-02T00:00:00.000Z
Updated: 2025-04-09T13:21:45.766Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26812 vulnerable 2026-06-08 05:30:45.249433 Details available
Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application.
Published: 2021-04-14T13:55:47.000Z
Updated: 2024-08-03T20:33:40.879Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.