Lucene search

K

MitreCVELIST:CVE-2023-28686

HistoryMar 24, 2023 - 12:00 a.m.

CVE-2023-28686

2023-03-2400:00:00

mitre

www.cve.org

5

dino

bookmark store

attackers

crafted message

group chats

sensitive information

AI Score

6.8

Confidence

High

EPSS

0.004

Percentile

72.8%

Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via a crafted message. The attacker can change the display of group chats or force a victim to join a group chat; the victim may then be tricked into disclosing sensitive information.

References

dino.im/security/cve-2023-28686/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQLCEUZS5GPHUQMS7C6W2NS3PHYUFHYF/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GOH6NYTLPM52MDIR2IRVUR3REDVWZV6N/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IIWXAK656EHSRIRUHLPBE3AX2I4TMH7M/

www.debian.org/security/2023/dsa-5379

AI Score

6.8

Confidence

High

EPSS

0.004

Percentile

72.8%

Related for CVELIST:CVE-2023-28686

osv3 cve1 fedora3 debian1 nessus5 openvas5 debiancve1 prion1 nvd1 veracode1 ubuntucve1 freebsd1 mageia1 alpinelinux1