Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 10

Количество 10

ubuntu логотип

CVE-2022-4055

почти 4 года назад

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

CVSS3: 7.4
EPSS: Низкий
redhat логотип

CVE-2022-4055

больше 4 лет назад

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

CVSS3: 7.4
EPSS: Низкий
nvd логотип

CVE-2022-4055

почти 4 года назад

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

CVSS3: 7.4
EPSS: Низкий
msrc логотип

CVE-2022-4055

почти 2 года назад

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

CVSS3: 7.4
EPSS: Низкий
debian логотип

CVE-2022-4055

почти 4 года назад

When xdg-mail is configured to use thunderbird for mailto URLs, improp ...

CVSS3: 7.4
EPSS: Низкий
rocky логотип

RLSA-2025:7672

около 1 года назад

Moderate: xdg-utils security update

EPSS: Низкий
github логотип

GHSA-p4jr-wm76-h2v3

почти 4 года назад

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

CVSS3: 7.4
EPSS: Низкий
oracle-oval логотип

ELSA-2025-7672

больше 1 года назад

ELSA-2025-7672: xdg-utils security update (MODERATE)

EPSS: Низкий
fstec логотип

BDU:2025-04910

больше 4 лет назад

Уязвимость утилиты для открытия почтового клиента из набора xdg-utils xdg-mail, связанная с недостаточной проверкой введенных пользователем данных, позволяющая нарушителю оказать влияние на целостность защищаемой информации

CVSS3: 7.4
EPSS: Низкий
altlinux логотип

ALT-PU-2024-10322

больше 2 лет назад

ALT-PU-2024-10322: package `xdg-utils` update to version 1.2.1-alt2

CVSS3: 7.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

CVSS3: 7.4
1%
Низкий
почти 4 года назад
redhat логотип
CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

CVSS3: 7.4
1%
Низкий
больше 4 лет назад
nvd логотип
CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

CVSS3: 7.4
1%
Низкий
почти 4 года назад
msrc логотип
CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

CVSS3: 7.4
1%
Низкий
почти 2 года назад
debian логотип
CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improp ...

CVSS3: 7.4
1%
Низкий
почти 4 года назад
rocky логотип
RLSA-2025:7672

Moderate: xdg-utils security update

1%
Низкий
около 1 года назад
github логотип
GHSA-p4jr-wm76-h2v3

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

CVSS3: 7.4
1%
Низкий
почти 4 года назад
oracle-oval логотип
ELSA-2025-7672

ELSA-2025-7672: xdg-utils security update (MODERATE)

1%
Низкий
больше 1 года назад
fstec логотип
BDU:2025-04910

Уязвимость утилиты для открытия почтового клиента из набора xdg-utils xdg-mail, связанная с недостаточной проверкой введенных пользователем данных, позволяющая нарушителю оказать влияние на целостность защищаемой информации

CVSS3: 7.4
1%
Низкий
больше 4 лет назад
altlinux логотип
ALT-PU-2024-10322

ALT-PU-2024-10322: package `xdg-utils` update to version 1.2.1-alt2

CVSS3: 7.4
1%
Низкий
больше 2 лет назад

Уязвимостей на страницу