Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-25019
7.5
HIGHCVSS v3
Published
August 29, 2020
CVSS v2
4.3 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances.
GitHub