CVE-2021-45087 — Cross-site Scripting in Epiphany

CWE-79 — Cross-site Scripting7 documents6 sources
Severity
6.1MEDIUMNVD
EPSS
0.3%
top 47.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Gnome EpiphanyDebian Linux
Timeline
PublishedDec 16
Latest updateAug 10

Description

XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used, as demonstrated by a a page title.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

▶NVDgnome/epiphany41.0 — 41.1+1

Also affects: Debian Linux 10.0, 11.0

Patches

Patch: gitlab.gnome.org ↗Patch: gitlab.gnome.org ↗

🔴Vulnerability Details

4
OSV
epiphany-browser vulnerabilities↗2022-08-10
▶
GHSA
GHSA-vw96-55hq-p2pg: XSS can occur in GNOME Web (aka Epiphany) before 40↗2021-12-17
▶
OSV
CVE-2021-45087: XSS can occur in GNOME Web (aka Epiphany) before 40↗2021-12-16
▶
CVEList
CVE-2021-45087: XSS can occur in GNOME Web (aka Epiphany) before 40↗2021-12-16
▶

📋Vendor Advisories

2
Ubuntu
GNOME Web vulnerabilities↗2022-08-10
▶
Debian
CVE-2021-45087: epiphany-browser - XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when ...↗2021
▶
CVE-2021-45087 — Cross-site Scripting in Gnome Epiphany | cvebase