Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-22787
HistoryMay 18, 2022 - 5:15 p.m.

Cross site request forgery (csrf)

2022-05-1817:15:00
PRIOn knowledge base
www.prio-n.com
3

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.4%

The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.10.0 fails to properly validate the hostname during a server switch request. This issue could be used in a more sophisticated attack to trick an unsuspecting users client to connect to a malicious server when attempting to use Zoom services.

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.4%