Description
TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| TrueConf Server | TrueConf / TrueConf Server | >= *, < 5.3 | affected |
| TrueConf Server | TrueConf / TrueConf Server | >= 5.3, < 5.3.9 | affected |
| TrueConf Server | TrueConf / TrueConf Server | >= 5.4, < 5.4.9 | affected |
| TrueConf Server | TrueConf / TrueConf Server | >= 5.5, < 5.5.5 | affected |