Zoom clients prior to 5.13.10 contain an HTML injection vulnerability. A malicious user could inject HTML into their display name potentially leading a victim to a malicious website during meeting creation.
References
| Link | Resource |
|---|---|
| https://explore.zoom.us/en/trust/security/security-bulletin/ | Vendor Advisory |
| https://explore.zoom.us/en/trust/security/security-bulletin/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:55
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://explore.zoom.us/en/trust/security/security-bulletin/ - Vendor Advisory |
19 Sep 2024, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Zoom clients prior to 5.13.10 contain an HTML injection vulnerability. A malicious user could inject HTML into their display name potentially leading a victim to a malicious website during meeting creation. | |
| CWE | CWE-79 |
21 Jun 2023, 20:52
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| First Time |
Zoom
Zoom zoom |
|
| CPE | cpe:2.3:a:zoom:zoom:*:*:*:*:*:macos:*:* cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux:*:* cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:* cpe:2.3:a:zoom:zoom:*:*:*:*:*:iphone_os:*:* cpe:2.3:a:zoom:zoom:*:*:*:*:*:android:*:* |
|
| CWE | CWE-74 | |
| References | (MISC) https://explore.zoom.us/en/trust/security/security-bulletin/ - Vendor Advisory |
13 Jun 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-13 17:15
Updated : 2024-11-21 07:55
NVD link : CVE-2023-28599
Mitre link : CVE-2023-28599
CVE.ORG link : CVE-2023-28599
JSON object : View
Products Affected
zoom
- zoom