CVE-2023-42222

WebCatalog before 49.0 is vulnerable to Incorrect Access Control. WebCatalog calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances...

PT-2023-28296 · Electron +1 · Electron +1

Name of the Vulnerable Software and Affected Versions: WebCatalog versions prior to 49.0 Description: The issue arises from WebCatalog calling the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances. This leads to incorrect...