High · 8.8 CVE-2021-4020 EUVD-2021-33923GHSA-cq47-8w25-m65v

Cross-site Scripting (XSS) - Stored in meetecho/janus-gateway

Published Nov 27, 2021 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: meetecho Product: meetecho/janus-gateway Package: janus Package: janus Ecosystem: Debian Ecosystem: Ubuntu

Description

janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Vendor	Product	Affected	Fixed
meetecho	meetecho/janus-gateway	unspecified – < 0.11.6	0.11.6

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	janus	0.11.5-4	—
Debian 12	janus	0.11.5-4	—

Ubuntu