Loading HuntDB...

GHSA-mxvv-v7w8-j88h

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

The vulnerability was discovered within the “FaviconService”. The service takes a base64-encoded URL which is then requested by the webserver. We assume this service is used by the “meetings”-function where users can specify an external URL where the online meeting will take place.

Related CVEs

Key Information

GHSA ID
GHSA-mxvv-v7w8-j88h
Published
May 13, 2022 12:00 AM
Last Modified
June 30, 2023 9:30 PM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: September 14, 2025 6:31 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.