Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2025-10735

Высокий

ALT-PU-2025-10735: package epiphany update to version 48.5-alt1

Источник
errata.altlinux.org
Дата публикации
02.10.2025
Дата обновления
02.10.2025
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades epiphany to version 48.5-alt1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 8
ubuntu
10 месяцев назад

A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this action, resulting in potential code execution on the client device via trusted UI behavior.

CVSS3: 8
nvd
10 месяцев назад

A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this action, resulting in potential code execution on the client device via trusted UI behavior.

CVSS3: 8
debian
10 месяцев назад

A flaw was found in Epiphany, a tool that allows websites to open exte ...

CVSS3: 8
github
10 месяцев назад

A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this action, resulting in potential code execution on the client device via trusted UI behavior.

CVSS3: 7.5
fstec
больше 1 года назад

Уязвимость веб-браузера Epiphany, связанная с отсутствием предупреждения пользователя о небезопасных действиях, позволяющая нарушителю выполнить произвольный код