[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGxoGnwyNq7kYTveplJnIZpU_CI3fHeaAsYorMxHP2pI":3,"g5a-risk:CVE-2022-4055":106},{"success":4,"data":5,"meta":103},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":27,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":54,"weaknesses":55,"weaknessesCount":43,"isActivelyExploited":64,"cisaInfo":27,"otxData":27,"relatedBlogPosts":65,"seoMetadata":66,"configurations":91,"relatedVendorCves":101,"notableEvents":102},"CVE-2022-4055","What is CVE-2022-4055?","When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.","When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that s...","2022-11-19T00:15:31.003","2025-04-29T19:15:53.337",7.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":26,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","REQUIRED","CHANGED","HIGH",null,2.8,4,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":26,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},0.00678,[34,34,34,34,34,34,34],"High",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"freedesktop","xdg-utils","*","cpe:2.3:a:freedesktop:xdg-utils:*:*:*:*:*:*:*:*",1,[45,52],{"url":46,"source":47,"tags":48},"https:\u002F\u002Fgitlab.freedesktop.org\u002Fxdg\u002Fxdg-utils\u002F-\u002Fissues\u002F205#note_1494267","Freedesktop",[49,50,51],"Exploit","Issue Tracking","Third Party Advisory",{"url":46,"source":47,"tags":53},[49,50,51],2,[56],{"id":57,"name":58,"description":59,"extendedDescription":60,"status":61,"abstraction":62,"structure":63},"CWE-146","Improper Neutralization of Expression\u002FCommand Delimiters","The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as expression or command delimiters when they are sent to a downstream component.","As data is parsed, an injected\u002Fabsent\u002Fmalformed delimiter may cause the process to take unexpected actions.","Incomplete","Variant","Simple",false,[],{"title":67,"metaDescription":68,"keywords":69,"canonicalUrl":70,"structuredData":71},"What is CVE-2022-4055? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-4055, a high severity cyber security vulnerability from 2022. When xdg-mail is configured to use thunderbird for mailto UR...","CVE-2022-4055, CVE-2022-4055 vulnerability, CVE-2022-4055 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, freedesktop security, xdg-utils vulnerability","\u002Fwhat-is\u002Fcve-2022-4055",{"@context":72,"@type":73,"headline":67,"description":68,"datePublished":10,"dateModified":11,"author":74,"publisher":78,"about":82,"mainEntityOfPage":86,"articleSection":89,"keywords":90},"https:\u002F\u002Fschema.org","TechArticle",{"@type":75,"name":76,"url":77},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":75,"name":76,"url":77,"logo":79},{"@type":80,"url":81},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":83,"name":6,"description":84,"additionalType":85},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":87,"@id":88},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-4055","Cybersecurity","CVE-2022-4055, CVE-2022-4055 vulnerability, CVE-2022-4055 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[92],{"Operator":27,"Negate":27,"Nodes":93},[94],{"Operator":95,"Negate":27,"CPEMatch":96},"OR",[97],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":98,"VersionStartExcluding":27,"VersionStartIncluding":99,"VersionEndExcluding":27,"VersionEndIncluding":100},"F69C0408-E439-4FF5-A724-E33B46B41275","1.1.0","1.1.3",[],[],{"lastModified":11,"cacheTime":104,"version":105},1792362772868,"2.0",{"score":107,"band":108,"action":109,"scoredAt":110},48,"Medium","Plan remediation","2026-10-16T06:56:19.989716+00:00"]