PT-2021-20524
CVE-2021-34425
·
تاريخ النشر
2021-12-14
·
تاريخ التحديث
2022-04-12
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Zoom Client for Meetings versions prior to 5.7.3
Description:
The issue concerns a server-side request forgery vulnerability in the chat's "link preview" functionality. If a user enables this feature, a malicious actor could trick the user into sending arbitrary HTTP GET requests to URLs that the actor cannot reach directly.
Recommendations:
For versions prior to 5.7.3, update to version 5.7.3 or later to resolve the issue. As a temporary workaround, consider disabling the "link preview" feature in the chat until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾