CVE-2021-36668

URL injection in Driva inSync 6.9.0 for MacOS, allows attackers to force a visit to an arbitrary url via the port parameter to the Electron App.
Configurations

Configuration 1

cpe:2.3:a:druva:insync_client:*:*:*:*:*:macos:*:*
cpe:2.3:a:druva:insync_client:*:*:*:*:*:linux:*:*
cpe:2.3:a:druva:insync_client:*:*:*:*:*:windows:*:*

Information

Published : 2022-07-12 02:15

Updated : 2022-07-20 03:56


NVD link : CVE-2021-36668

Mitre link : CVE-2021-36668

Products Affected
CWE