CVE-2023-44689

🗓️ 11 Oct 2023 00:06:37Reported by jpcertType

e-Gov Client Application has improper authorization, allowing crafted URLs to direct product to arbitrary website, making user vulnerable to phishing

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-44689	11 Oct 202307:17	–	circl
CNNVD	Digital Agency e-Gov Electronic application Security Breach	6 Oct 202300:00	–	cnnvd
Cvelist	CVE-2023-44689	11 Oct 202300:06	–	cvelist
EUVD	EUVD-2023-49024	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#15808274: e-Gov Client Application fails to restrict custom URL schemes properly	6 Oct 202300:00	–	jvn
Japan Vulnerability Notes	e-Gov Client Application fails to restrict custom URL schemes properly	6 Oct 202305:57	–	jvn
NVD	CVE-2023-44689	11 Oct 202301:15	–	nvd
Prion	Authorization	11 Oct 202301:15	–	prion
RedhatCVE	CVE-2023-44689	23 May 202505:36	–	redhatcve
Vulnrichment	CVE-2023-44689	11 Oct 202300:06	–	vulnrichment

NVD

Vulners

Node

e-gov e-govRange<1.1.1.0macos

e-gov e-govRange<2.1.1.0windows

[
  {
    "vendor": "Digital Agency",
    "product": "e-Gov Client Application (Windows version)",
    "versions": [
      {
        "version": "versions prior to 2.1.1.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Digital Agency",
    "product": "e-Gov Client Application (macOS version)",
    "versions": [
      {
        "version": "versions prior to 1.1.1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
shinsei	www.shinsei.e-gov.go.jp/contents/news/2023-03-12t1022040900_1318.html
jvn	www.jvn.jp/en/jp/JVN15808274/

21 Nov 2024 08:25Current

4.7Medium risk

Vulners AI Score4.7

CVSS 3.14.3

EPSS0.00056

SSVC

CWE-862