Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hvvr-3hp7-3wj6

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.

EPSS

Процентиль: 89%
0.04595
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.8
nvd
больше 6 лет назад

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.

CVSS3: 4.2
msrc
больше 6 лет назад

Microsoft Edge Elevation of Privilege Vulnerability

CVSS3: 4.2
fstec
больше 6 лет назад

Уязвимость браузера Microsoft Edge, связанная с недостатками разграничения доступа, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 89%
0.04595
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-863