CVE-2023-3434
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
In Jami (version 20222284) by Savoir-faire Linux on Windows, there is improper input validation in hyperlink interpretation. This allows an attacker to send a custom HTML anchor tag to pass a string value to the Windows QRC Handler through the Jami messenger.
Risk Assessment
This vulnerability could be exploited by an attacker to manipulate data, potentially leading to unauthorized access or execution of malicious code. Organizations should be aware of the risks associated with using this version of the software.
Recommendation
It is recommended to update Jami to the latest version to mitigate this vulnerability. Additionally, implementing further input validation mechanisms in applications using hyperlinks is advisable.
Original NVD description (English source)
Improper Input Validation in the hyperlink interpretation in Savoir-faire Linux's Jami (version 20222284) on Windows. This allows an attacker to send a custom HTML anchor tag to pass a string value to the Windows QRC Handler through the Jami messenger.