GitHub - j00sean/CVE-2022-44666: Write-up for another forgotten Windows vulnerability (0day): Microsoft Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape, which was not fully fixed as CVE-2022-44666 in the patches released on December, 2022.
https://github.com/j00sean/CVE-2022-44666