PT-2023-14253 · Jitsi+1 · Jitsi+1

Damencho · CVE-2022-43550 · Published 2023-02-09 · Updated 2025-10-27

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jitsi versions prior to commit 8aa7be58522f4264078d54752aae5483bfd854b2

Description A command injection issue exists when launching browsers on Windows, allowing an attacker to insert an arbitrary URL, which could lead to remote execution.

Recommendations For versions prior to commit 8aa7be58522f4264078d54752aae5483bfd854b2, update to a version that includes the fix for this issue.

Exploit

Fix

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

ALT-PU-2025-13426

CVE-2022-43550

Affected Products

Alt Linux

Jitsi

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/43xxx/CVE-2022-43550.json · Exploit
• https://github.com/jitsi/jitsi/commit/8aa7be58522f4264078d54752aae5483bfd854b2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-43550 · Security Note
• https://osv.dev/vulnerability/CVE-2022-43550 · Vendor Advisory
• https://t.me/cvenotify/116069 · Telegram Post