Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2h4m-9mfv-2j2r

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site.

Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site.

EPSS

Процентиль: 48%
0.00252
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
nvd
почти 9 лет назад

Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site.

CVSS3: 6.5
fstec
почти 9 лет назад

Уязвимость технологии Protect браузера Yandex Browser, позволяющая нарушителю скрыть уведомления о подозрительном контенте

EPSS

Процентиль: 48%
0.00252
Низкий

6.5 Medium

CVSS3