Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-45299
HistoryJan 13, 2023 - 12:00 a.m.

CVE-2022-45299

2023-01-1300:00:00
ubuntu.com
ubuntu.com
12
ipfile argument issue
webbrowser-rs v0.8.2
crafted url
arbitrary files
unix

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

61.5%

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows
attackers to access arbitrary files via supplying a crafted URL.

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchrust-webbrowser< anyUNKNOWN
ubuntu22.04noarchrust-webbrowser< anyUNKNOWN

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

61.5%

Related for UB:CVE-2022-45299