CVE-2023-42222

WebCatalog before 49.0 is vulnerable to Incorrect Access Control. WebCatalog calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances...

CVE-2023-42222

WebCatalog (desktop app) before version 49.0 is vulnerable to Incorrect Access Control due to Electron shell.openExternal being invoked without validating http/https URLs. The CVE-2023-42222 description and Red Hat/PRION entries confirm this issue affects WebCatalog pre-49.0 with potential for co...

CVE-2020-25019

jitsi-meet-electron aka Jitsi Meet Electron before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances...

CVE-2020-25019

CVE-2020-25019 affects jitsi-meet-electron (Jitsi Meet Electron) up to version 2.3.0. The vulnerability arises when the Electron shell.openExternal function is invoked without verifying that the target URL is http or https, in certain circumstances. Impact details are not fully elaborated in the ...

CVE-2020-25019

jitsi-meet-electron aka Jitsi Meet Electron before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances...