CVE-2024-44729

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Oct 11, 2024
Updated: Oct 16, 2024
CWE ID 732

Summary

CVE-2024-44729 is a newly disclosed vulnerability affecting Mirotalk's component app/src/server.js. This issue involves incorrect access control, enabling unauthenticated attackers to eject users from a meeting without holding presenter privileges. This vulnerability could lead to unwanted disruption of meetings, potentially impacting productivity and security. It is recommended that Mirotalk users update their software to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share