Description (CNA)
The vulnerability was discovered within the “FaviconService”. The service takes a base64-encoded URL which is then requested by the webserver. We assume this service is used by the “meetings”-function where users can specify an external URL where the online meeting will take place.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HCL Software / Sametime | affected 11.6 |
CWE
CWE-472
References
ADP enrichment
No English description supplied.