CVE-2017-20041CWE-1021

Ucweb UC Browser HTML URL improper restriction of rendered ui layers

Medium · published June 13, 2022

CVSS v3.1
5.4
EPSS
1%
Percentile
52.5
In the wild
Unconfirmed
What it is

A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers (URL). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00704 · 52.5th percentile
Weakness
CWE-1021 · Improper Restriction of Rendered UI Layers or Frames
Published
2022-06-13T06:50Z
EPSS history
Timeline
  • 13 JUN 06:50Z
    Ucweb UC Browser HTML URL improper restriction of rendered ui layers
    cvelistv5