Medium severity4.3NVD Advisory· Published Jun 13, 2023· Updated Jun 17, 2026
CVE-2023-28599
CVE-2023-28599
Description
Zoom clients prior to 5.13.10 contain an HTML injection vulnerability. A malicious user could inject HTML into their display name potentially leading a victim to a malicious website during meeting creation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11cpe:2.3:a:zoom:zoom:*:*:*:*:*:android:*:*+ 4 more
- cpe:2.3:a:zoom:zoom:*:*:*:*:*:android:*:*range: <5.13.10
- cpe:2.3:a:zoom:zoom:*:*:*:*:*:iphone_os:*:*range: <5.13.10
- cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux:*:*range: <5.13.10
- cpe:2.3:a:zoom:zoom:*:*:*:*:*:macos:*:*range: <5.13.10
- cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*range: <5.13.10
- Range: <5.13.10
- Range: before 5.13.10
- Range: before 5.13.10
- Range: before 5.13.10
- Range: before 5.13.10
- Range: before 5.13.10
Patches
Vulnerability mechanics
References
1- explore.zoom.us/en/trust/security/security-bulletin/nvdVendor Advisory
News mentions
0No linked articles in our index yet.