Описание
ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.12.7 (исключая)
cpe:2.3:a:thebrowser:arc_search:*:*:*:*:*:android:*:*
EPSS
Процентиль: 7%
0.00173
Низкий
7.4 High
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-1021
Связанные уязвимости
CVSS3: 7.4
github
6 месяцев назад
ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content.
EPSS
Процентиль: 7%
0.00173
Низкий
7.4 High
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-1021