Описание
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps/bionic | ignored | |
| esm-apps/focal | ignored | |
| esm-apps/jammy | ignored | |
| esm-apps/noble | ignored | |
| esm-infra-legacy/xenial | ignored | |
| esm-infra/xenial | ignored | |
| jammy | ignored | |
| noble | ignored | |
| plucky | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps-legacy/xenial | ignored | |
| esm-apps/bionic | ignored | |
| esm-apps/xenial | ignored | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| questing | DNE | |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 2.50.3-1ubuntu1 |
| esm-infra-legacy/xenial | ignored | |
| esm-infra/bionic | ignored | |
| esm-infra/focal | ignored | |
| esm-infra/xenial | ignored | |
| jammy | released | 2.50.3-0ubuntu0.22.04.1 |
| noble | released | 2.50.3-0ubuntu0.24.04.1 |
| plucky | released | 2.50.3-0ubuntu0.25.04.1 |
| questing | released | 2.50.3-0ubuntu0.25.10.1 |
| upstream | released | 2.50.3 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps-legacy/xenial | ignored | |
| esm-apps/bionic | ignored | |
| esm-apps/xenial | ignored | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| questing | DNE | |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps/focal | ignored | |
| esm-apps/jammy | ignored | |
| jammy | ignored | |
| noble | DNE | |
| plucky | DNE | |
| questing | DNE | |
| upstream | released | 2.50.3-1 |
Показывать по
7.4 High
CVSS3
Связанные уязвимости
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
A flaw was found in WebKitGTK. This vulnerability allows remote, user- ...
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
Уязвимость модулей отображения веб-страниц WPE WebKit и WebKitGTK, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным
7.4 High
CVSS3