itssixtyn3in/CVE-2023-42222

itssixtyn3in/CVE-2023-42222

GitHubGitHub
GitHubgithub.com
Releases0
Stars3
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-42222↗
8.8 HIGH—

WebCatalog before 49.0 is vulnerable to Incorrect Access Control. WebCatalog calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances.