Lucene search

K
cvelistMitreCVELIST:CVE-2016-7966
HistoryDec 23, 2016 - 10:00 p.m.

CVE-2016-7966

2016-12-2322:00:00
mitre
www.cve.org
5

AI Score

7.5

Confidence

High

EPSS

0.008

Percentile

81.8%

Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail’s plaintext viewer. Due to the parser used on the URL it was not possible to include the equal sign (=) or a space into the injected HTML, which greatly reduces the available HTML functionality. Although it is possible to include an HTML comment indicator to hide content.

AI Score

7.5

Confidence

High

EPSS

0.008

Percentile

81.8%