8.1

CVE-2019-6251

Exploit
WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnome ≫ Epiphany Version <= 3.31.4
Webkitgtk ≫ Webkitgtk Version < 2.24.1
Wpewebkit ≫ Wpe Webkit Version < 2.24.1
Fedoraproject ≫ Fedora Version 28
Fedoraproject ≫ Fedora Version 29
Fedoraproject ≫ Fedora Version 30
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 18.10
Opensuse ≫ Leap Version 15.0
Opensuse ≫ Leap Version 42.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.09% 0.895
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.1 2.8 5.2
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
NIST 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.openwall.com/lists/oss-security/2019/04/11/1
Third Party Advisory
Mailing List
https://seclists.org/bugtraq/2019/Apr/21
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html
Third Party Advisory
http://packetstormsecurity.com/files/152485/WebKitGTK-WPE-WebKit-URI-Spoofing-Code-Execution.html
Third Party Advisory
VDB Entry
https://bugs.webkit.org/show_bug.cgi?id=194208
Vendor Advisory
Issue Tracking
https://gitlab.gnome.org/GNOME/epiphany/issues/532
Patch
Third Party Advisory
Exploit
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSCDI3635E37GL4BNJDRDT2KEUBDLGSO/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LACVFU4MYYRPJ3IEA4UCN5KUEAGCCJ72/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNPI3R6QWDJBA5KNGA6QSMKYLY5RRHBZ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UO3DIA54X7FOUWFZW5YXC2MZ6KNHG6SW/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YO5ZBUWOOXMVZPBYLZRDZF6ZQGBYJERQ/
https://security.gentoo.org/glsa/201909-05
https://trac.webkit.org/changeset/243434
Patch
Vendor Advisory
https://usn.ubuntu.com/3948-1/
Third Party Advisory