Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2023-3434

QRC Handler without Input Validation in Jami

Description

Improper Input Validation in the hyperlink interpretation in Savoir-faire Linux's Jami (version 20222284) on Windows. This allows an attacker to send a custom HTML anchor tag to pass a string value to the Windows QRC Handler through the Jami messenger.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Savoir-faire Linux Jami

Default version status: unaffected

  • 20222284affected

References