Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-34425
HistoryDec 14, 2021 - 8:15 p.m.

Server side request forgery (ssrf)

2021-12-1420:15:00
PRIOn knowledge base
www.prio-n.com
1

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.4%

The Zoom Client for Meetings before version 5.7.3 (for Android, iOS, Linux, macOS, and Windows) contain a server side request forgery vulnerability in the chat's “link preview” functionality. In versions prior to 5.7.3, if a user were to enable the chat's “link preview” feature, a malicious actor could trick the user into potentially sending arbitrary HTTP GET requests to URLs that the actor cannot reach directly.

CPENameOperatorVersion
meetingslt5.7.3

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.4%

Related for PRION:CVE-2021-34425