exploitDog

GHSA-c5xh-6qp8-4792

Опубликовано: 17 мая 2022

Источник: github

Github: Не прошло ревью

Описание

Cross-site scripting (XSS) vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script or HTML via an extra in an Intent object, aka "Universal XSS (UXSS)."

Cross-site scripting (XSS) vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script or HTML via an extra in an Intent object, aka "Universal XSS (UXSS)."

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2012-4905
https://code.google.com/p/chromium/issues/detail?id=144813
http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html

EPSS

Процентиль: 72%

0.01553

Низкий

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2012-4905

ubuntu

почти 14 лет назад

Cross-site scripting (XSS) vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script or HTML via an extra in an Intent object, aka "Universal XSS (UXSS)."

CVE-2012-4905

nvd

почти 14 лет назад

Cross-site scripting (XSS) vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script or HTML via an extra in an Intent object, aka "Universal XSS (UXSS)."

CVE-2012-4905

debian

почти 14 лет назад

Cross-site scripting (XSS) vulnerability in Google Chrome before 18.0. ...

EPSS

Процентиль: 72%

0.01553

Низкий

CVE ID

Дефекты

CWE-79