← Database

CVE-2024-44730

CRITICAL CVSS: 9.1 Published: 2024-10-11 Modified: 2026-06-17

Description

Incorrect access control in the function handleDataChannelChat(dataMessage) of Mirotalk before commit c21d58 allows attackers to forge chat messages using an arbitrary sender name.

Affected Platforms

Unknown

Weakness Type

CWE-924

References