CVE-2020-25019: jitsi meet electron

csirt@kutim:~/threat-intel/cve/CVE-2020-25019

CVSS 7.5 · High EPSS 1,0%

Kerentanan Insufficient Verification of Data Authenticity pada jitsi meet electron. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances.

Rincian

Terbit di NVD: 29 Agustus 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-345: Insufficient Verification of Data Authenticity
EPSS (30 hari): 1,0% peluang dieksploitasi; lebih tinggi dari 62,5% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
jitsi	meet electron	Semua versi sebelum 2.3.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/jitsi/jitsi-meet-electron/commit/ca1eb702507fdc4400fe21c905a9f85702f92a14 patch · advisory pihak ketiga
https://github.com/jitsi/jitsi-meet-electron/releases/tag/v2.3.0 release notes · advisory pihak ketiga
https://security.stackexchange.com/questions/225799 exploit · advisory pihak ketiga
https://github.com/jitsi/jitsi-meet-electron/security/advisories/GHSA-x4h8-fhrp-pm3p
https://github.com/jitsi/security-advisories/blob/master/advisories/JSA-2020-0001.md

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.