Описание
CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Одновременно
Одно из
Одно из
EPSS
7.4 High
CVSS3
Дефекты
Связанные уязвимости
CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.
Уязвимость наборов библиотек Content Credentials SDK, связанная с использованием ненадёжного пути поиска, позволяющая нарушителю выполнить произвольный код
EPSS
7.4 High
CVSS3