CVE-2019-11928 — Cross-site Scripting in Whatsapp Desktop

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
6.1MEDIUMNVD
EPSS
0.2%
top 56.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Facebook Whatsapp DesktopWhatsapp Desktop
Timeline
PublishedSep 3
Latest updateMay 24

Description

An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon clicking on a link from a specially crafted live location message.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5facebook/whatsapp_desktopunspecified — 0.3.4932+1

🔴Vulnerability Details

2
GHSA
GHSA-m3fj-55xx-478h: An input validation issue in WhatsApp Desktop versions prior to v0↗2022-05-24
▶
CVEList
CVE-2019-11928: An input validation issue in WhatsApp Desktop versions prior to v0↗2020-09-03
▶
CVE-2019-11928 — Cross-site Scripting | cvebase