High · 8.1 CVE-2021-4124 EUVD-2021-33998GHSA-gv3q-27qx-g2xh

Cross-site Scripting (XSS) - Stored in meetecho/janus-gateway

Published Dec 16, 2021 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: meetecho Product: meetecho/janus-gateway Package: janus Package: janus Ecosystem: Debian Ecosystem: Ubuntu

Description

janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Vendor	Product	Affected	Fixed
meetecho	meetecho/janus-gateway	unspecified – < 0.11.7	0.11.7

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	janus	No fix yet	—
Debian 12	janus	No fix yet	—

Ubuntu