| Package | Affected versions | Patched versions |
|---|---|---|
| meetings | < 5.7.3 | 5.7.3 |
The Zoom Client for Meetings before version 5.7.3 (for Android, iOS, Linux, macOS, and Windows) contain a server side request forgery vulnerability in the chat\'s "link preview" functionality. In versions prior to 5.7.3, if a user were to enable the chat\'s "link preview" feature, a malicious actor could trick the user into potentially sending arbitrary HTTP GET requests to URLs that the actor cannot reach directly.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free