Skip to content
OpenAdvisories
Medium · 4.4 CVE-2023-3434 EUVD-2023-44098GHSA-rqg8-85fc-g6f4

QRC Handler without Input Validation in Jami

Published Jul 14, 2023 · Updated Oct 22, 2024 · Assigned by BLSOPS

Description

Improper Input Validation in the hyperlink interpretation in Savoir-faire Linux's Jami (version 20222284) on Windows.

This allows an attacker to send a custom HTML anchor tag to pass a string value to the Windows QRC Handler through the Jami messenger.

Affected products

VendorProductAffectedFixed
Savoir-faire Linux Jami 20222284 —

References