nvd-json-data-feeds/CVE-2024/CVE-2024-447xx/CVE-2024-44734.json

{
  "id": "CVE-2024-44734",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2024-10-11T17:15:04.157",
  "lastModified": "2024-10-15T12:57:46.880",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a crafted roomAction request to the server."
    },
    {
      "lang": "es",
      "value": "Un control de acceso incorrecto en Mirotalk antes de el commit 9de226 permite a los atacantes cambiar arbitrariamente los nombres de usuario mediante el env\u00edo de una solicitud roomAction manipulada espec\u00edficamente para el servidor."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://aware7.com/de/blog/schwachstellen-in-videokonferenzsystemen/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/miroslavpejic85",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/miroslavpejic85/mirotalk",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/miroslavpejic85/mirotalksfu/blob/main/SECURITY.md",
      "source": "cve@mitre.org"
    }
  ]
}