VYPR
← All advisories
High severity7.1NVD Advisory· Published Mar 24, 2023· Updated Jun 17, 2026

CVE-2023-28686

CVE-2023-28686

Description

Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via a crafted message. The attacker can change the display of group chats or force a victim to join a group chat; the victim may then be tricked into disclosing sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Dino/Dinodescription
  • Dino/Dinollm-fuzzy2 versions
    <0.2.3, <0.3.2, <0.4.2+ 1 more
    • (no CPE)range: <0.2.3, <0.3.2, <0.4.2
    • cpe:2.3:a:dino:dino:*:*:*:*:*:*:*:*range: <0.2.3
  • Fedoraproject/Fedora3 versions
    cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
  • Debian/linux3 versions
    cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
  • osv-coords
    pkg:rpm/opensuse/dino&distro=openSUSE%20Tumbleweed
    Range: < 0.4.2-1.1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.