CVE-2021-45085

XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list.

References

Affected packages

Git / gitlab.gnome.org/GNOME/epiphany

Affected ranges

Type

GIT

Repo

https://gitlab.gnome.org/GNOME/epiphany

Events

Introduced

Fixed

4088856b3371bda10adc3b818f58b3087b8f9dbc

Introduced

d8163fa7ea74b2be14da9d4217e9d3e0c41cdb2a

Fixed

18623a5da5bf2b492cf7725bc29c7997623f4de3

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "40.4"
        },
        {
            "introduced": "41.0"
        },
        {
            "fixed": "41.1"
        }
    ]
}

Affected versions

41.*

41.0

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-45085.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "11.0"
            }
        ]
    }
]