Security Advisory
CVE-2024-40656
5.5
MEDIUM
Vulnerability Description
In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Published Date
September 11, 2024
Official Source
NIST NVD Advisory