Skip to main content

Untrusted Search Path

CVE-2023-43586

High
7.3/10

Summary

Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access.

  • HIGH
  • NETWORK
  • HIGH
  • CHANGED
  • REQUIRED
  • HIGH
  • HIGH
  • NONE

CWE-426 - Untrusted Search Path

The application searches for critical resources using an externally-supplied search path that can point to resources that are not under the application's direct control.

References

Advisory Timeline

  • Published