CVE-2020-25019

jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or…

published August 29, 2020

CVSS
—
EPSS
1%
Percentile
63.2
In the wild
Unconfirmed
What it is

jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01022 · 63.2th percentile
Published
2020-08-29T16:07Z
EPSS history
Timeline
  • 29 AUG 16:07Z
    jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or…
    cvelistv5