CVE-2023-42222

PoC —

CVSS 3.1

8.8 high

EPSS

1%p71

Published

Sep 28, 2023 (Sep 28, 2023)

Modified

Jun 17, 2026

Description

WebCatalog before 49.0 is vulnerable to Incorrect Access Control. WebCatalog calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances.

Vendors: webcatalog
Products: webcatalog
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.