CVE-2017-15429

Опубликовано: 14 дек. 2017

Источник: redhat

CVSS3: 8.8

EPSS Низкий

Описание

Inappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239.108 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

Ссылки на источники

Дополнительная информация

Статус:

Important

https://bugzilla.redhat.com/show_bug.cgi?id=1526405chromium-browser: uxss in v8

EPSS

Процентиль: 65%

0.01152

Низкий

8.8 High

CVSS3

Связанные уязвимости

CVE-2017-15429

CVSS3: 6.1

ubuntu

около 8 лет назад

Inappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239.108 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

CVE-2017-15429

CVSS3: 6.1

nvd

около 8 лет назад

Inappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239.108 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

CVE-2017-15429

CVSS3: 6.1

debian

около 8 лет назад

Inappropriate implementation in V8 WebAssembly JS bindings in Google C ...

GHSA-cqrg-9hh6-w946

CVSS3: 6.1

github

больше 4 лет назад

Inappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239.108 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

EPSS

Процентиль: 65%

0.01152

Низкий

8.8 High

CVSS3