CVE-2021-4124

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-4124
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-4124.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-4124
Downstream
Published
2021-12-16T14:15:08Z
Modified
2026-10-20T10:54:58Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References

Affected packages

Git / github.com/meetecho/janus-gateway

Affected ranges

Type
GIT
Repo
https://github.com/meetecho/janus-gateway
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
ed0ec46507950a2cc8fbf13c9fe084c0e2ced2b0
Fixed
f62bba6513ec840761f2434b93168106c7c65a3d
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:meetecho:janus:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "0.11.6"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "range":  [
                {
                    "fixed":  "f62bba6513ec840761f2434b93168106c7c65a3d"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

v0.*
v0.0.9
v0.1.0
v0.1.1
v0.1.2
v0.10.0
v0.10.1
v0.10.10
v0.10.2
v0.10.3
v0.10.4
v0.10.5
v0.10.6
v0.10.7
v0.10.8
v0.10.9
v0.11.1
v0.11.2
v0.11.3
v0.11.4
v0.11.5
v0.11.6
v0.2.0
v0.2.1
v0.2.2
v0.2.3
v0.2.4
v0.2.5
v0.2.6
v0.3.0
v0.3.1
v0.4.0-broken
v0.4.1
v0.4.2
v0.4.3
v0.4.4
v0.4.5
v0.5.0
v0.6.0
v0.6.1
v0.6.2
v0.6.3
v0.7.0
v0.7.1
v0.7.2
v0.7.3
v0.7.4
v0.7.5
v0.7.6
v0.8.0
v0.8.1
v0.8.2
v0.9.0
v0.9.1
v0.9.2
v0.9.3
v0.9.4
v0.9.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-4124.json"