CVE-2017-20120: TrueConf Server

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of the file /admin/service/stop/. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

• TrueConf TrueConf Server: version 4.3.7.12219 only; version 4.3.7.12255 only

Published 2022-06-29. Last modified 2026-08-20.