Approved changes feed: RSS · Atom
cpe:2.3:a:trueconf:server:5.5.2.10813:*:*:*:*:*:*:*
part: a version: 5.5.2.10813 update: *
| Vendor | Trueconf (bfcc9041-0079-5954-86ee-fcd8e37c4959) |
|---|---|
| Product | Server (096385c6-976c-5e89-9ef9-869078f54b55) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-66834 |
vulnerable | 2026-06-08 07:41:19.493698 |
Details available
A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to inject malicious spreadsheet formulas into exported chat logs via crafted Display Name.
Published: 2025-12-30T00:00:00.000Z
Updated: 2026-01-02T15:10:39.440Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66824 |
vulnerable | 2026-06-08 07:41:19.493225 |
Details available
A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Create/Edit Conference functionality in TrueConf Server v5.5.2.10813. The injected payload is stored via the meeting_room parameter and executed when users visit the Conference Info page, allowing attackers to achieve full Account Takeover (ATO). This issue is caused by improper sanitization of user-supplied input in the meeting_room field.
Published: 2025-12-30T00:00:00.000Z
Updated: 2026-01-02T14:51:23.374Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66823 |
vulnerable | 2026-06-08 07:41:19.492766 |
Details available
An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference functionality. The payload will be triggered when the victim opens the Conference Info page ([conference url]/info).
Published: 2025-12-30T00:00:00.000Z
Updated: 2026-01-02T14:40:23.211Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.