VYPR
← All advisories
High severity7.4NVD Advisory· Published Nov 19, 2022· Updated Jun 17, 2026

CVE-2022-4055

CVE-2022-4055

Description

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • xdg-mail/xdg-maildescription
  • osv-coords
    pkg:rpm/almalinux/xdg-utils
    Range: < 1.1.3-13.el9_6
  • Xorg/Xdg Utilsllm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • cpe:2.3:a:freedesktop:xdg-utils:*:*:*:*:*:*:*:*range: >=1.1.0,<=1.1.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.