CVE-2021-34425
Medium
Description
The Zoom Client for Meetings before version 5.7.3 (for Android, iOS, Linux, macOS, and Windows) contain a server side request forgery vulnerability in the chat\'s "link preview" functionality. In versions prior to 5.7.3, if a user were to enable the chat\'s "link preview" feature, a malicious actor could trick the user into potentially sending arbitrary HTTP GET requests to URLs that the actor cannot reach directly.
SeverityMedium
CVSS4.7
Exploit probability—
Product
Zoom Meetings
PublishedDec 14, 2021
First seenDec 14, 2021
How to fix
Update
- zoom meetings5.7.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zoom meetings | v < 5.7.3 | 5.7.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.