Security features bypass in ruqola - #VU69679
Published: November 29, 2022
Vulnerability identifier: #VU69679
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-254
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to the way external links are processed within the client messaging software. A remote attacker can trick the victim to click on the URL in the "Server Info" dialog box that leads to a local file and execute it on the system.
Successful exploitation of the vulnerability may allow an attacker to compromise the affected system.
Affected software
ruqola
Remediation
Install updates from vendor's website.
ruqola - update to 1.8.2