Описание
A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers (URL). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Ссылки
- ExploitMailing ListThird Party Advisory
- ExploitPermissions RequiredThird Party Advisory
- ExploitMailing ListThird Party Advisory
- ExploitPermissions RequiredThird Party Advisory
Уязвимые конфигурации
EPSS
5.4 Medium
CVSS3
6.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
Связанные уязвимости
A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers (URL). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
EPSS
5.4 Medium
CVSS3
6.5 Medium
CVSS3
4.3 Medium
CVSS2