Zoom Client < 5.13.10 HTML Injection Vulnerability (ZSB-23007) - Windows

Zoom Client is prone to an HTML injection vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom"; ifdescriptio...

Zoom Client < 5.13.10 Multiple Vulnerabilities (ZSB-23006, ZSB-23007) - Linux

Zoom Client is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom"; ifdescription...

CVE-2023-28599

CVE-2023-28599 affects Zoom Client prior to 5.13.10. An HTML injection in the user’s display name could redirect victims to a malicious website during meeting creation. Root cause: HTML injection in display name handling. Impact: potential unauthorized navigation to attacker-controlled content; c...

Zoom Client for Meetings < 5.13.10 Vulnerability (ZSB-23007)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.13.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-23007 advisory. - Zoom clients prior to 5.13.10 contain an HTML injection vulnerability. A malicious user could inject HTML into their...