CVE-2023-28686

CVE-2023-28686 is a high-severity vulnerability affecting Dino versions before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2, as well as various Debian and Fedora distributions. An unauthenticated attacker can exploit this via a crafted message to modify a victim's personal bookmark store, potentially forcing them to join group chats and leading to sensitive information disclosure. While the CVSS score is 7.1 (High) with a network attack vector and low complexity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.