Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r6w6-2q7f-ww58

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.

EPSS

Процентиль: 80%
0.01395
Низкий

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 4.2
nvd
почти 6 лет назад

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.

CVSS3: 4.2
msrc
почти 6 лет назад

Microsoft Edge Elevation of Privilege Vulnerability

CVSS3: 4.2
fstec
почти 6 лет назад

Уязвимость браузера Microsoft Edge, связанная с некорректным использованием политик междоменного доступа, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 80%
0.01395
Низкий

Дефекты

CWE-269