CVE-2023-28599
published 2023-06-13CVE-2023-28599: Zoom clients prior to 5.13.10 contain an HTML injection vulnerability. A malicious user could inject HTML into their display name potentially leading a victim…
PriorityP418medium4.3CVSS 3.1
AVNACLPRNUIRSUCNILAN
EPSS
0.73%
49.5th percentile
Zoom clients prior to 5.13.10 contain an HTML injection vulnerability. A malicious user could inject HTML into their display name potentially leading a victim to a malicious website during meeting creation.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| zoom | zoom | < 5.13.10 | 5.13.10 |
| zoom_video_communications_inc | zoom_for_android | — | — |
| zoom_video_communications_inc | zoom_for_ios | — | — |
| zoom_video_communications_inc | zoom_for_linux | — | — |
| zoom_video_communications_inc | zoom_for_macos | — | — |
| zoom_video_communications_inc | zoom_for_windows | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-06-13
Published