Wind River Support Network

HomeDefectsLIN1021-4783

Acknowledged

LIN1021-4783 : Security Advisory - xdg-utils - CVE-2022-4055

Created: Nov 17, 2022 Updated: Nov 27, 2022

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-4055

CREATE(Triage):(User=admin) CVE-2022-4055 (https://nvd.nist.gov/vuln/detail/CVE-2022-4055)