Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4jq6-q6h2-8qqx

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page.

Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page.

EPSS

Процентиль: 48%
0.00253
Низкий

Связанные уязвимости

nvd
больше 16 лет назад

Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page.

EPSS

Процентиль: 48%
0.00253
Низкий