Lucene search

K
cvelistMitreCVELIST:CVE-2023-42222
HistorySep 28, 2023 - 12:00 a.m.

CVE-2023-42222

2023-09-2800:00:00
mitre
www.cve.org
1
webcatalog
incorrect access control
electron

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.9%

WebCatalog before 49.0 is vulnerable to Incorrect Access Control. WebCatalog calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances.

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.9%