CVE-2019-14432

Incorrect authentication of application WebSocket connections in Loom Desktop for Mac up to 0.16.0 allows remote code execution from either malicious…

published August 7, 2019

CVSS
—
EPSS
2%
Percentile
83.0
In the wild
Unconfirmed
What it is

Incorrect authentication of application WebSocket connections in Loom Desktop for Mac up to 0.16.0 allows remote code execution from either malicious JavaScript in a browser or hosts on the same network, during periods in which a user is recording a video with the application. The same attack vector can be used to crash the application at any time.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02278 · 83.0th percentile
Published
2019-08-07T14:56Z
EPSS history
Timeline
  • 07 AUG 14:56Z
    Incorrect authentication of application WebSocket connections in Loom Desktop for Mac up to 0.16.0 allows remote code execution from either malicious…
    cvelistv5