Msrc Cbl2 Xdg-Utils 1.1.3-7 On Cbl Mariner 2.0 vulnerabilities

1 known vulnerability affecting msrc/cbl2_xdg-utils_1.1.3-7_on_cbl_mariner_2.0.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2020-27748MEDIUMCVSS 6.52021-06-08

CVE-2020-27748 [MEDIUM] CWE-201 A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbi A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automati