← back
CVE-2021-4124

Cross-site Scripting (XSS) - Stored in meetecho/janus-gateway

CVSS 8.1 HIGHEPSS 0.9%CWE-79
janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Affected products
meetecho · meetecho/janus-gateway

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/meetecho/janus-gateway/commit/f62bba6513ec840761f2434b93168106c7c65a3dhttps://huntr.dev/bounties/a6ca142e-60aa-4d6f-b231-5d1bcd1b7190