Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cgwp-53w9-wx8r

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

iCab 2.9.8 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."

iCab 2.9.8 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."

EPSS

Процентиль: 57%
0.00351
Низкий

Связанные уязвимости

nvd
больше 20 лет назад

iCab 2.9.8 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."

EPSS

Процентиль: 57%
0.00351
Низкий