Описание
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used as the pdf_name value in PDF.js.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | not-affected | 42.4-1 |
| esm-apps-legacy/xenial | needs-triage | |
| esm-apps/bionic | needed | |
| esm-apps/focal | released | 3.36.4-0ubuntu2 |
| esm-apps/jammy | not-affected | 42.1-1 |
| esm-apps/noble | not-affected | 42.4-1 |
| esm-apps/resolute | not-affected | 42.4-1 |
| esm-apps/xenial | ignored | end of ESM support, was needs-triage |
| focal | released | 3.36.4-0ubuntu2 |
Показывать по
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3
Связанные уязвимости
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used as the pdf_name value in PDF.js.
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before ...
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used as the pdf_name value in PDF.js.
ALT-PU-2021-3624: package `epiphany` update to version 40.6-alt1
ALT-PU-2021-3546: package `epiphany` update to version 41.1-alt1
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3