Published: 16/12/2021 Updated: 19/08/2022

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

XSS can occur in GNOME Web (aka Epiphany) prior to 40.4 and 41.x prior to 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnome epiphany
debian debian linux 10.0
debian debian linux 11.0

Several security issues were fixed in GNOME Web ...

Several vulnerabities have been discovered in Epiphany, the GNOME web browser, allowing XSS attacks under certain circumstances For the stable distribution (bullseye), these problems have been fixed in version 3382-1+deb11u1 We recommend that you upgrade your epiphany-browser packages For the detailed security status of epiphany-browser please ...

CWE-79 https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1045 https://gitlab.gnome.org/GNOME/epiphany/-/issues/1612 https://www.debian.org/security/2022/dsa-5042 https://lists.debian.org/debian-lts-announce/2022/08/msg00006.html https://ubuntu.com/security/notices/USN-5561-1 https://nvd.nist.gov https://www.debian.org/security/2022/dsa-5042

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2021-45085

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect