CVE-2023-3434 | BDVDB-2026-207349 Detail
Savoir-faire LinuxJami
Description#
Improper Input Validation in the hyperlink interpretation in Savoir-faire Linux's Jami (version 20222284) on Windows. This allows an attacker to send a custom HTML anchor tag to pass a string value to the Windows QRC Handler through the Jami messenger.
Impact#
CAPEC-48 Passing Local Filenames to Functions That Expect a URL
Weaknesses#
- CWE-20 Improper Input Validation
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.