CVE-2022-35962 - Vulnerability Details - OpenCVE

ReportizFlow

Zulip is an open source team chat and Zulip Mobile is an app for iOS and Andriod users. In Zulip Mobile through version 27.189, a crafted link in a message sent by an authenticated user could lead to credential disclosure if a user follows the link. A patch was released in version 27.190.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Zulip	Zulip

Configuration 1 [-]

OR	cpe:2.3:a:zulip:zulip::::::android::*
	cpe:2.3:a:zulip:zulip::::::iphone_os::*

No data.

References

Link	Providers
https://blog.zulip.com/2022/08/24/zulip-server-5-6-security-release/
https://github.com/zulip/zulip-mobile/releases/tag/v27.190
https://github.com/zulip/zulip-mobile/security/advisories/GHSA-4gj2-j32x-4wg5

History

No history.

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2022-08-29T14:50:09

Updated: 2024-08-03T09:51:59.287Z

Reserved: 2022-07-15T00:00:00

Link: CVE-2022-35962

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-08-29T15:15:10.980

Modified: 2024-11-21T07:12:03.640

Link: CVE-2022-35962

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "zulip-mobile", "vendor": "zulip", "versions": [{"status": "affected", "version": "< 27.190"}]}], "descriptions": [{"lang": "en", "value": "Zulip is an open source team chat and Zulip Mobile is an app for iOS and Andriod users. In Zulip Mobile through version 27.189, a crafted link in a message sent by an authenticated user could lead to credential disclosure if a user follows the link. A patch was released in version 27.190."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-184", "description": "CWE-184: Incomplete List of Disallowed Inputs", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-436", "description": "CWE-436: Interpretation Conflict", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-08-29T14:50:09", "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/zulip/zulip-mobile/security/advisories/GHSA-4gj2-j32x-4wg5"}, {"tags": ["x_refsource_MISC"], "url": "https://blog.zulip.com/2022/08/24/zulip-server-5-6-security-release/"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/zulip/zulip-mobile/releases/tag/v27.190"}], "source": {"advisory": "GHSA-4gj2-j32x-4wg5", "discovery": "UNKNOWN"}, "title": "Crafted link in Zulip message can cause disclosure of credentials", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2022-35962", "STATE": "PUBLIC", "TITLE": "Crafted link in Zulip message can cause disclosure of credentials"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "zulip-mobile", "version": {"version_data": [{"version_value": "< 27.190"}]}}]}, "vendor_name": "zulip"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Zulip is an open source team chat and Zulip Mobile is an app for iOS and Andriod users. In Zulip Mobile through version 27.189, a crafted link in a message sent by an authenticated user could lead to credential disclosure if a user follows the link. A patch was released in version 27.190."}]}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-184: Incomplete List of Disallowed Inputs"}]}, {"description": [{"lang": "eng", "value": "CWE-436: Interpretation Conflict"}]}]}, "references": {"reference_data": [{"name": "https://github.com/zulip/zulip-mobile/security/advisories/GHSA-4gj2-j32x-4wg5", "refsource": "CONFIRM", "url": "https://github.com/zulip/zulip-mobile/security/advisories/GHSA-4gj2-j32x-4wg5"}, {"name": "https://blog.zulip.com/2022/08/24/zulip-server-5-6-security-release/", "refsource": "MISC", "url": "https://blog.zulip.com/2022/08/24/zulip-server-5-6-security-release/"}, {"name": "https://github.com/zulip/zulip-mobile/releases/tag/v27.190", "refsource": "MISC", "url": "https://github.com/zulip/zulip-mobile/releases/tag/v27.190"}]}, "source": {"advisory": "GHSA-4gj2-j32x-4wg5", "discovery": "UNKNOWN"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T09:51:59.287Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/zulip/zulip-mobile/security/advisories/GHSA-4gj2-j32x-4wg5"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://blog.zulip.com/2022/08/24/zulip-server-5-6-security-release/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/zulip/zulip-mobile/releases/tag/v27.190"}]}]}, "cveMetadata": {"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "assignerShortName": "GitHub_M", "cveId": "CVE-2022-35962", "datePublished": "2022-08-29T14:50:09", "dateReserved": "2022-07-15T00:00:00", "dateUpdated": "2024-08-03T09:51:59.287Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:zulip:zulip:*:*:*:*:*:android:*:*", "matchCriteriaId": "661B0854-2236-46A4-9C07-CB679643DC10", "versionEndExcluding": "27.190", "vulnerable": true}, {"criteria": "cpe:2.3:a:zulip:zulip:*:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "7A5F420A-5817-4623-AE0E-23F80DEC8A9D", "versionEndExcluding": "27.190", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Zulip is an open source team chat and Zulip Mobile is an app for iOS and Andriod users. In Zulip Mobile through version 27.189, a crafted link in a message sent by an authenticated user could lead to credential disclosure if a user follows the link. A patch was released in version 27.190."}, {"lang": "es", "value": "Zulip es un equipo de chat de c\u00f3digo abierto y Zulip Mobile es una aplicaci\u00f3n para usuarios de iOS y Android. En Zulip Mobile versiones hasta 27.189, un enlace dise\u00f1ado en un mensaje enviado por un usuario autenticado pod\u00eda conllevar a una revelaci\u00f3n de credenciales si un usuario segu\u00eda el enlace. Ha sido publicado un parche en versi\u00f3n 27.190"}], "id": "CVE-2022-35962", "lastModified": "2024-11-21T07:12:03.640", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 5.9, "source": "[email protected]", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}]}, "published": "2022-08-29T15:15:10.980", "references": [{"source": "[email protected]", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://blog.zulip.com/2022/08/24/zulip-server-5-6-security-release/"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://github.com/zulip/zulip-mobile/releases/tag/v27.190"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://github.com/zulip/zulip-mobile/security/advisories/GHSA-4gj2-j32x-4wg5"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://blog.zulip.com/2022/08/24/zulip-server-5-6-security-release/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/zulip/zulip-mobile/releases/tag/v27.190"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/zulip/zulip-mobile/security/advisories/GHSA-4gj2-j32x-4wg5"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-184"}, {"lang": "en", "value": "CWE-436"}], "source": "[email protected]", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-697"}], "source": "[email protected]", "type": "Primary"}]}