CVE-2022-4055

 

Published at: - 19-11-2022 01:15

Last modified: - 20-11-2022 03:44

Total changes: - 2

Description

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

Common Vulnerability Scoring System (CVSS)

-

 

Verification logic

 

Reference

• https://gitlab.freedesktop.org/xdg/xdg-utils/-/issues/205#note_1494267

 

Keywords

NVD

 

CVE-2022-4055

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures