Zoom Workplace Apps Cross-Site Scripting Vulnerability Allowing Integrity Loss

A cross-site scripting vulnerability has been identified in certain Zoom Workplace applications. This issue may enable an unauthenticated user to manipulate data integrity through adjacent network access. The vulnerability affects multiple platforms, including Windows, macOS, Linux, iOS, and Android, as well as Zoom's VDI client and Rooms Controller and Client applications.

Impact

Exploitation of this vulnerability could lead to cross-site scripting, allowing for the injection of malicious scripts that could be executed in the context of the user's session.

Remediation

Users are advised to update to the latest version of the Zoom Workplace App. The latest version can be downloaded from the Zoom Download Center.