Security Advisory
CVE-2024-44734
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a crafted roomAction request to the server.