Lucene search

K

MitreCVELIST:CVE-2023-28686

HistoryMar 24, 2023 - 12:00 a.m.

CVE-2023-28686

2023-03-2400:00:00

mitre

www.cve.org

1

dino

bookmark store

attackers

crafted message

group chats

sensitive information

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.3%

Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via a crafted message. The attacker can change the display of group chats or force a victim to join a group chat; the victim may then be tricked into disclosing sensitive information.

References

dino.im/security/cve-2023-28686/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQLCEUZS5GPHUQMS7C6W2NS3PHYUFHYF/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GOH6NYTLPM52MDIR2IRVUR3REDVWZV6N/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IIWXAK656EHSRIRUHLPBE3AX2I4TMH7M/

www.debian.org/security/2023/dsa-5379

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.3%

Related for CVELIST:CVE-2023-28686

cve1 osv2 fedora3 openvas5 nessus5 debian1 ubuntucve1 veracode1 freebsd1 mageia1 alpinelinux1 prion1 nvd1 debiancve1