CVE-2021-45085

概要

参考情報

• gitlab.gnome.org/GNOME/epiphany/-/issues/1612 · Exploit
• gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1045 · Patch
• lists.debian.org/debian-lts-announce/2022/08/msg00006.html · Mailing List
• debian.org/security/2022/dsa-5042 · Third Party Advisory

epiphany のその他の脆弱性

• CVE-2023-26081高 7.5In Epiphany (aka GNOME Web) through 43.0, untrusted web content can trick users into exfiltrating passwords, because autofill occurs in sand…
• CVE-2022-29536高 7.5In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI …
• CVE-2021-45088中 6.1XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an error page.
• CVE-2021-45087中 6.1XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used, as demonstrated by …
• CVE-2021-45086中 6.1XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used as the pdf_name val…