CVE-2024-44080

7.5 highEPSS 0.5%

High (7.5) in 8x8 jitsi meet. EPSS 0.5% chance of exploitation in the next 30 days.

In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another participant contains a URL encoded in the expected format.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-10-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

8x8:jitsi_meet

References

https://github.com/jitsi/jitsi-meet/compare/jitsi-meet_9672...jitsi-meet_9673
https://github.com/jitsi/security-advisories/blob/master/advisories/JSA-2024-0002.md

Check your stack JSON