CVE-2021-45086

Description

XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a servers suggested_filename is used as the pdf_name value in PDF.js.

Risk Information

Base Score

6.1

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

0.212

Associated Vulnerability

Vulnerability	OS Platform
epiphany-browser security update(DSA-5042-1) epiphany-browser_3.38.2-1+deb11u1_amd64.deb	Linux
Intuitive GNOME web browser (USN-5561-1) epiphany-browser_42.1-1ubuntu1_amd64.deb	Linux
Intuitive GNOME web browser (USN-5561-1) epiphany-browser_3.36.4-0ubuntu2_amd64.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234