First published: Mon Apr 29 2024(Updated: )
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Deepen Bajracharya Video Conferencing with Zoom.This issue affects Video Conferencing with Zoom: from n/a through 4.4.4.
Credit: audit@patchstack.com
Affected Software | Affected Version | How to fix |
---|---|---|
Zoom Video Conferencing | <=4.4.4 | |
Zoom Video Conferencing | <=4.4.4 |
Update to 4.4.5 or a higher version.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-33584 is classified as a medium severity vulnerability due to its potential for exploitation via open redirection.
To fix CVE-2024-33584, update the Video Conferencing with Zoom plugin to the latest version beyond 4.4.4.
CVE-2024-33584 could allow attackers to redirect users to untrusted sites, potentially leading to phishing attacks.
CVE-2024-33584 affects all versions of Video Conferencing with Zoom from n/a through 4.4.4.
A temporary workaround for CVE-2024-33584 is to disable or limit the use of external URL redirection features until the plugin is updated.