1 result · Clear filters · Feed
-
High 8.0
Insecure use of shell.openExternal in Wire
In Wire before 3.20.x, `shell.openExternal` was used without checking the URL. This vulnerability allows an attacker to execute code on the victims machine by sending messages containing links with arbitrary protocols. The victim has to interact with the link…