CVE-2020-11000CWE-939

Improper URL validation in GreenBrowser

Medium · published April 8, 2020

CVSS v3.1
5.7
EPSS
1%
Percentile
69.0
In the wild
Unconfirmed
What it is

GreenBrowser before version 1.2 has a vulnerability where apps that rely on URL Parsing to verify that a given URL is pointing to a trust server may be susceptible to many different ways to get URL parsing and verification wrong, which allows an attacker to circumvent the access control. This problem has been patched in version 1.2.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01242 · 69.0th percentile
Weakness
CWE-939 · Improper Authorization in Handler for Custom URL Scheme
Published
2020-04-08T16:30Z
EPSS history
Timeline
  • 08 APR 16:30Z
    Improper URL validation in GreenBrowser
    cvelistv5