CVE-2022-28763

The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.2 is susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary network address, leading to additional attacks including session takeovers.

CVSS v3.0 9.6 CRITICAL

9.6^/10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://explore.zoom.us/en/trust/security/security-bulletin/	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:zoom:virtual_desktop_infrastructure::::::windows::*
	cpe:2.3:a:zoom:meetings::::::android::*
	cpe:2.3:a:zoom:meetings::::::iphone_os::*
	cpe:2.3:a:zoom:meetings::::::linux::*
	cpe:2.3:a:zoom:meetings::::::macos::*
	cpe:2.3:a:zoom:meetings::::::windows::*
	cpe:2.3:a:zoom:rooms_for_conference_rooms::::::linux::*
	cpe:2.3:a:zoom:rooms_for_conference_rooms::::::macos::*
	cpe:2.3:a:zoom:rooms_for_conference_rooms::::::iphone_os::*
	cpe:2.3:a:zoom:rooms_for_conference_rooms::::::windows::*
	cpe:2.3:a:zoom:rooms_for_conference_rooms::::::android::*

Information

Published : 2022-10-31 13:15

Updated : 2022-11-01 12:43

NVD link : CVE-2022-28763

Mitre link : CVE-2022-28763

JSON object : View

CWE

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')

Products Affected

zoom

virtual_desktop_infrastructure
meetings
rooms_for_conference_rooms

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://explore.zoom.us/en/trust/security/security-bulletin/", "name": "https://explore.zoom.us/en/trust/security/security-bulletin/", "tags": ["Vendor Advisory"], "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.2 is susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary network address, leading to additional attacks including session takeovers."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-601"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2022-28763", "ASSIGNER": "security@zoom.us"}}, "impact": {"baseMetricV3": {"cvssV3": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.8}}, "publishedDate": "2022-10-31T20:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:zoom:virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "5.12.2"}, {"cpe23Uri": "cpe:2.3:a:zoom:meetings:*:*:*:*:*:android:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "5.12.2"}, {"cpe23Uri": "cpe:2.3:a:zoom:meetings:*:*:*:*:*:iphone_os:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "5.12.2"}, {"cpe23Uri": "cpe:2.3:a:zoom:meetings:*:*:*:*:*:linux:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "5.12.2"}, {"cpe23Uri": "cpe:2.3:a:zoom:meetings:*:*:*:*:*:macos:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "5.12.2"}, {"cpe23Uri": "cpe:2.3:a:zoom:meetings:*:*:*:*:*:windows:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "5.12.2"}, {"cpe23Uri": "cpe:2.3:a:zoom:rooms_for_conference_rooms:*:*:*:*:*:linux:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "5.12.2"}, {"cpe23Uri": "cpe:2.3:a:zoom:rooms_for_conference_rooms:*:*:*:*:*:macos:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "5.12.2"}, {"cpe23Uri": "cpe:2.3:a:zoom:rooms_for_conference_rooms:*:*:*:*:*:iphone_os:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "5.12.2"}, {"cpe23Uri": "cpe:2.3:a:zoom:rooms_for_conference_rooms:*:*:*:*:*:windows:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "5.12.2"}, {"cpe23Uri": "cpe:2.3:a:zoom:rooms_for_conference_rooms:*:*:*:*:*:android:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "5.12.2"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2022-11-01T19:43Z"}

9.6 /10