CVE-2021-39215: 8x8 jitsi meet

csirt@kutim:~/threat-intel/cve/CVE-2021-39215

CVSS 7.5 · High EPSS 1,2%

Kerentanan Improper Authentication pada 8x8 jitsi meet. Skor CVSS 3.1 7.5 (High) menurut github.com.

Deskripsi (NVD)

Jitsi Meet is an open source video conferencing application. In versions prior to 2.0.5963, a Prosody module allows the use of symmetrical algorithms to validate JSON web tokens. This means that tokens generated by arbitrary sources can be used to gain authorization to protected rooms. This issue is fixed in Jitsi Meet 2.0.5963. There are no known workarounds aside from updating.

Rincian

Terbit di NVD: 15 September 2021
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.5 (High), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-287: Improper Authentication
EPSS (30 hari): 1,2% peluang dieksploitasi; lebih tinggi dari 68,2% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
8x8	jitsi meet	Versi 2.0.5963

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/jitsi/jitsi-meet/pull/9319 patch · advisory pihak ketiga
https://github.com/jitsi/jitsi-meet/security/advisories/GHSA-45ff-37jm-xjfx advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.