Riskcovery

CVE-2023-44689

State
Published
Severity
Not scored
Published
Oct 11, 2023
Updated
Sep 18, 2024
Reserved
Oct 2, 2023

Read the record on cve.org

Description

e-Gov Client Application (Windows version) versions prior to 2.1.1.0 and e-Gov Client Application (macOS version) versions prior to 1.1.1.0 are vulnerable to improper authorization in handler for custom URL scheme. A crafted URL may direct the product to access an arbitrary website. As a result, the user may become a victim of a phishing attack.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
e-Gov Client Application (Windows version)Digital Agency
  • versions prior to 2.1.1.0Affected
e-Gov Client Application (macOS version)Digital Agency
  • versions prior to 1.1.1.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.