CVE-2021-33506: 8x8 Jitsi Meet
High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.
jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrict_room_creation is set by default. This can allow an attacker to circumvent conference moderation.
Affected products
- 8x8 Jitsi Meet: before 2.0.5963 (fixed in 2.0.5963)
Published 2021-05-26. Last modified 2026-06-17.