Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-18347

Опубликовано: 11 дек. 2018
Источник: debian
EPSS Низкий

Описание

Incorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to trick a user into executing javascript in an arbitrary origin via a crafted HTML page.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
chromiumfixed71.0.3578.80-1package

EPSS

Процентиль: 81%
0.01563
Низкий

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 7 лет назад

Incorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to trick a user into executing javascript in an arbitrary origin via a crafted HTML page.

CVSS3: 6.5
redhat
около 7 лет назад

Incorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to trick a user into executing javascript in an arbitrary origin via a crafted HTML page.

CVSS3: 8.8
nvd
около 7 лет назад

Incorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to trick a user into executing javascript in an arbitrary origin via a crafted HTML page.

CVSS3: 8.8
github
больше 3 лет назад

Incorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to trick a user into executing javascript in an arbitrary origin via a crafted HTML page.

CVSS3: 8.8
fstec
около 7 лет назад

Уязвимость браузера Google Chrome, связанная с некорректной проверкой ввода данных, позволяющая нарушителю выполнить JavaScript-код в произвольном источнике

EPSS

Процентиль: 81%
0.01563
Низкий