NetSight
IP …
high7.1

CVE-2023-28686

Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via a crafted message.

Impact

Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via a crafted message. The attacker can change the display of group chats or force a victim to join a group chat; the victim may then be tricked into disclosing sensitive information.

Affected products

VendorProductAffected versions
DinoDino
before 0.2.3
from 0.3.0 before 0.3.2
from 0.4.0 before 0.4.2
FedoraprojectFedora
Versions 36, 37, 38
DebianDebian Linux
Versions 10.0, 11.0, 12.0

Weakness classification

CWE-639

References