Skip to content
OpenAdvisories
Low · 3.7 CVE-2021-34419 EUVD-2021-21077GHSA-484c-hxgg-w2g4

HTML injection in Zoom Linux client

Published Nov 11, 2021 · Updated Sep 17, 2024 · Assigned by Zoom

Description

In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a remote control request to a user in the process of in-meeting screen sharing. This could allow meeting participants to be targeted for social engineering attacks.

Affected products

VendorProductAffectedFixed
Zoom Video Communications Zoom Client for Meetings for Ubuntu Linux unspecified – < 5.1.0 5.1.0

References