Описание
GreenBrowser before version 1.2 has a vulnerability where apps that rely on URL Parsing to verify that a given URL is pointing to a trust server may be susceptible to many different ways to get URL parsing and verification wrong, which allows an attacker to circumvent the access control. This problem has been patched in version 1.2.
Ссылки
- PatchThird Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.2 (исключая)
cpe:2.3:a:greenbrowser_project:greenbrowser:*:*:*:*:*:*:*:*
EPSS
Процентиль: 49%
0.00256
Низкий
5.7 Medium
CVSS3
6.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-939
NVD-CWE-Other
EPSS
Процентиль: 49%
0.00256
Низкий
5.7 Medium
CVSS3
6.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-939
NVD-CWE-Other