CVE-2024-44734
High
Description
Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a crafted roomAction request to the server.
SeverityHigh
CVSS7.5
Exploit probability—
ProductMirotalk P2p
PublishedOct 11, 2024
First seenOct 11, 2024
Weakness typeCWE-346CWE-346
How to fix
Update
- mirotalk mirotalk_p2p9de226 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mirotalk mirotalk_p2p | v < 9de226 | 9de226 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.