VULNERABILITY INTELLIGENCE

CVE-2023-42222

CVSS score8.8 HIGH
EPSS probability1.73%
CISA KEVNot currently listed
Published2023-09-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

WebCatalog before 49.0 is vulnerable to Incorrect Access Control. WebCatalog calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references