Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
QRC Handler without Input Validation in Jami
Vulnerability Description
Improper Input Validation in the hyperlink interpretation in Savoir-faire Linux's Jami (version 20222284) on Windows. This allows an attacker to send a custom HTML anchor tag to pass a string value to the Windows QRC Handler through the Jami messenger.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Vulnerability Type
输入验证不恰当
Vulnerability Title
Jami 安全漏洞
Vulnerability Description
Jami是Jami公司的一个开放源代码且兼容于 SIP 的软件电话与即时通信软件。 Jami 20222284版本存在安全漏洞，该漏洞源于允许攻击者发送自定义HTML锚标记，将字符串值传递给Windows QRC处理程序。
CVSS Information
N/A
Vulnerability Type
N/A