CVE-2023-3434 is an improper input validation vulnerability in Savoir-faire Linux's Jami (version 20222284) on Windows, allowing an attacker to send a malicious HTML anchor tag to pass a string to the Windows QRC Handler. This vulnerability has a CVSS score of 5.4 (Medium), indicating a network-based attack with low complexity requiring user interaction, potentially leading to limited confidentiality and integrity impacts. Currently, there is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
20222284CPE matchmatch criteria | cpe:2.3:a:savoirfairelinux:jami:20222284:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.