Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2022-4055

Опубликовано: 11 фев. 2025
Источник: msrc
CVSS3: 7.4
EPSS Низкий

Описание

Описание отсутствует

EPSS

Процентиль: 11%
0.00038
Низкий

7.4 High

CVSS3

Связанные уязвимости

CVSS3: 7.4
ubuntu
около 3 лет назад

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

CVSS3: 7.4
redhat
больше 3 лет назад

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

CVSS3: 7.4
nvd
около 3 лет назад

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

CVSS3: 7.4
debian
около 3 лет назад

When xdg-mail is configured to use thunderbird for mailto URLs, improp ...

rocky
4 месяца назад

Moderate: xdg-utils security update

EPSS

Процентиль: 11%
0.00038
Низкий

7.4 High

CVSS3