Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5qcr-3r6j-g5fp

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to trick a user into loading a page containing malicious content, due to how the Edge Content Security Policy (CSP) validates documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11872 and CVE-2017-11874.

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to trick a user into loading a page containing malicious content, due to how the Edge Content Security Policy (CSP) validates documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11872 and CVE-2017-11874.

EPSS

Процентиль: 81%
0.01601
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 6.1
nvd
больше 7 лет назад

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to trick a user into loading a page containing malicious content, due to how the Edge Content Security Policy (CSP) validates documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11872 and CVE-2017-11874.

CVSS3: 4.2
msrc
больше 7 лет назад

Microsoft Edge Security Feature Bypass Vulnerability

EPSS

Процентиль: 81%
0.01601
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-20