WebCatalog before 49.0 is vulnerable to Incorrect Access Control
published September 28, 2023
CVSS
—
EPSS
2%
Percentile
77.3
In the wild
Unconfirmed
What it is
WebCatalog before 49.0 is vulnerable to Incorrect Access Control. WebCatalog calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01716 · 77.3th percentile
Published
2023-09-28T00:00Z
EPSS history
Timeline
28 SEP 00:00Z
WebCatalog before 49.0 is vulnerable to Incorrect Access Control