Lucene search
HistoryJun 13, 2023 - 5:15 p.m.
CVE-2023-28598
zoom
linux
html injection
vulnerability
application crash
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
34.8%
Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability. If a victim starts a chat with a malicious user it could result in a Zoom application crash.
Affected configurations
Node
zoomzoomRange<5.13.10linux
Related
nessus
nessus
Zoom Client for Meetings < 5.13.10 Vulnerability (ZSB-23006)
2023-06-13 00:00:00
prion
prion
Design/Logic Flaw
2023-06-13 17:15:00
cve
cve
CVE-2023-28598
2023-06-13 17:15:14
cvelist
cvelist
CVE-2023-28598
2023-06-13 16:49:29
openvas
openvas
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
34.8%
Related for NVD:CVE-2023-28598