Users can help keep themselves secure by applying current updates or downloading the latest Zoom software with all current security updates. This issue could be used in a more sophisticated attack to forge XMPP messages from the server. This could potentially allow for spoofing of a Zoom user. This issue could be used in a more sophisticated attack to trick a user into downgrading their Zoom client to a less secure version.
