cve/2024/CVE-2024-40656.md
2025-09-29 16:08:36 +00:00

855 B

CVE-2024-40656

Description

In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

POC

Reference

Github

No PoCs found on GitHub currently.