Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mqwf-vg2c-5ch3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vulnerability which can lead to remote code execution. An attacker can get a user to visit a webpage to trigger this vulnerability.

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vulnerability which can lead to remote code execution. An attacker can get a user to visit a webpage to trigger this vulnerability.

EPSS

Процентиль: 77%
0.01107
Низкий

8.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 4 лет назад

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vulnerability which can lead to remote code execution. An attacker can get a user to visit a webpage to trigger this vulnerability.

CVSS3: 8.8
redhat
больше 4 лет назад

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vulnerability which can lead to remote code execution. An attacker can get a user to visit a webpage to trigger this vulnerability.

CVSS3: 8.8
nvd
больше 4 лет назад

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vulnerability which can lead to remote code execution. An attacker can get a user to visit a webpage to trigger this vulnerability.

CVSS3: 8.8
debian
больше 4 лет назад

A code execution vulnerability exists in the WebSocket functionality o ...

CVSS3: 8.8
fstec
больше 4 лет назад

Уязвимость функции WebSocket модулей отображения веб-страниц WebKitGTK и WPE WebKit, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 77%
0.01107
Низкий

8.8 High

CVSS3

Дефекты

CWE-416