NetSight
IP …
medium6.1

CVE-2021-45085

XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS…

Impact

XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list.

Affected products

VendorProductAffected versions
GnomeEpiphany
before 40.4
from 41.0 before 41.1
DebianDebian Linux
Versions 10.0, 11.0

Weakness classification

CWE-79

References