CVE-2021-1525: Cisco Webex Meetings and Webex Meetings Server File Redirect Vulnerability

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-06-04 · updated 2026-06-17
Weakness: CWE-601

Description

A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to redirect users to a malicious file. This vulnerability is due to improper validation of URL paths in the application interface. An attacker could exploit this vulnerability by persuading a user to follow a specially crafted URL that is designed to cause Cisco Webex Meetings to include a remote file in the web UI. A successful exploit could allow the attacker to cause the application to offer a remote file to a user, which could allow the attacker to conduct further phishing or spoofing attacks.

Affected products

Cisco WebEx WRF Player: 41.3.5
Cisco WebEx Meetings Server: before 3.0; 3.0, 3.0-maintenance_release1, 3.0-maintenance_release2, 3.0-maintenance_release3, 4.0, 4.0-maintenance_release1 (+4) — fixed in 3.0

How to fix

Upgrade to a fixed version: Cisco WebEx Meetings Server 3.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-1525 or the next vulnerability affects your stack