CVE-2023-3434
QRC Handler without Input Validation in Jami
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
QRC Handler without Input Validation in Jami
Improper Input Validation in the hyperlink interpretation in Savoir-faire Linux's Jami (version 20222284) on Windows. This allows an attacker to send a custom HTML anchor tag to pass a string value to the Windows QRC Handler through the Jami messenger.
Reserved 2023-06-27 | Published 2023-07-14 | Updated 2024-10-22 | Assigner BLSOPSCWE-20 Improper Input Validation
review.jami.net/c/jami-client-qt/+/23569
git.jami.net/...rfairelinux/jami-client-qt/-/wikis/Changelog
blog.blacklanternsecurity.com/...QRC-Handler-Vulnerabilities
Support options
