Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Create/Edit Conference functionality in TrueConf Server v5.5.2.10813. The injected payload is stored via the meeting_room parameter and executed when users visit the Conference Info page, allowing attackers to achieve full Account Takeover (ATO). This issue is caused by improper sanitization of user-supplied input in the meeting_room field.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TrueConf Server 安全漏洞
Vulnerability Description
TrueConf Server是俄罗斯TrueConf公司的一种自托管和安全的视频协作平台。 TrueConf Server 5.5.2.10813版本存在安全漏洞，该漏洞源于会议地点字段对用户输入清理不当，可能导致存储型跨站脚本攻击和账户接管。
CVSS Information
N/A
Vulnerability Type
N/A