CVE-2023-44689

CVE-2023-44689: falha em Digital Agency e-Gov Client Application…

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar e-Gov Client Application

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.4%
e-Gov Client Application (Windows version) versions prior to 2.1.1.0 and e-Gov Client Application (macOS version) versions prior to 1.1.1.0 are vulnerable to improper authorization in handler for custom URL scheme. A crafted URL may direct the product to access an arbitrary website. As a result, the user may become a victim of a phishing attack.
Produtos afetados
Digital Agency · e-Gov Client Application (macOS version)Digital Agency · e-Gov Client Application (Windows version)