Description
The Zoom Client for Meetings before version 5.7.3 (for Android, iOS, Linux, macOS, and Windows) contain a server side request forgery vulnerability in the chat\'s "link preview" functionality. In versions prior to 5.7.3, if a user were to enable the chat\'s "link preview" feature, a malicious actor could trick the user into potentially sending arbitrary HTTP GET requests to URLs that the actor cannot reach directly.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Zoom Video Communications Inc Zoom Client for Meetings for Android
unspecified to < 5.7.3affected
Zoom Video Communications Inc Zoom Client for Meetings for iOS
unspecified to < 5.7.3affected
Zoom Video Communications Inc Zoom Client for Meetings for Linux
unspecified to < 5.7.3affected
Zoom Video Communications Inc Zoom Client for Meetings for macOS
unspecified to < 5.7.3affected
Zoom Video Communications Inc Zoom Client for Meetings for Windows
unspecified to < 5.7.3affected