Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-42222
HistorySep 28, 2023 - 3:15 a.m.

Design/Logic Flaw

2023-09-2803:15:00
PRIOn knowledge base
www.prio-n.com
8
webcatalog
electron
vulnerable
access control
url
security

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.9%

WebCatalog before 49.0 is vulnerable to Incorrect Access Control. WebCatalog calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances.

CPENameOperatorVersion
webcataloglt49.0

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.9%