Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-28686
HistoryMar 24, 2023 - 12:00 a.m.

CVE-2023-28686

2023-03-2400:00:00
ubuntu.com
ubuntu.com
19
dino
modify
bookmark
group chat
disclosure
unix

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

0.003 Low

EPSS

Percentile

68.3%

Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows
attackers to modify the personal bookmark store via a crafted message. The
attacker can change the display of group chats or force a victim to join a
group chat; the victim may then be tricked into disclosing sensitive
information.

Bugs

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

0.003 Low

EPSS

Percentile

68.3%