CVE-2021-45086

Description

References

• gitlab.gnome.org/GNOME/epiphany/-/issues/1612 · Exploit
• gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1045 · Patch
• debian.org/security/2022/dsa-5042 · Third Party Advisory

More vulnerabilities in epiphany

• CVE-2023-26081HIGH 7.5In Epiphany (aka GNOME Web) through 43.0, untrusted web content can trick users into exfiltrating passwords, because autofill occurs in sand…
• CVE-2022-29536HIGH 7.5In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI …
• CVE-2021-45088MEDIUM 6.1XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an error page.
• CVE-2021-45087MEDIUM 6.1XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used, as demonstrated by …
• CVE-2021-45085MEDIUM 6.1XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a…