Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mg74-7m97-36j6

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.

EPSS

Процентиль: 94%
0.14772
Средний

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 8.1
nvd
больше 5 лет назад

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.

CVSS3: 5.4
msrc
больше 5 лет назад

Microsoft Edge Elevation of Privilege Vulnerability

CVSS3: 8.1
fstec
больше 5 лет назад

Уязвимость веб-браузера Microsoft Edge, связана с недостаточной проверкой присвоения разрешений для критичного ресурса, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код

EPSS

Процентиль: 94%
0.14772
Средний

Дефекты

CWE-732