CVE-2021-45086

XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used as the pdf_name value in PDF.js

published December 16, 2021

CVSS
—
EPSS
1%
Percentile
72.1
In the wild
Unconfirmed
What it is

XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used as the pdf_name value in PDF.js.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01392 · 72.1th percentile
Published
2021-12-16T02:19Z
EPSS history
Timeline
  • 16 DEC 02:19Z
    XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used as the pdf_name value in PDF.js
    cvelistv5