CVE-2022-28763 — Improper URL parsing in Zoom Clients

Description (CNA)

The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.2 is susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary network address, leading to additional attacks including session takeovers.

Affected (CNA)

Vendor / product	Versions
Zoom Video Communications Inc / Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows)	affected unspecified before 5.12.2
Zoom Video Communications Inc / Zoom VDI Windows Meeting Clients	affected unspecified before 5.12.2
Zoom Video Communications Inc / Zoom Rooms for Conference Room (for Android, iOS, Linux, macOS, and Windows)	affected unspecified before 5.12.2

CWE

CWE-20

References

https://explore.zoom.us/en/trust/security/security-bulletin/

ADP enrichment

CVE

No English description supplied.

https://explore.zoom.us/en/trust/security/security-bulletin/

CISA-ADP

No English description supplied.

No references supplied.