Unrated
WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause...
CVE-2019-6251
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2019-6251 webkit2gtk Fixed in: 2.24.1-1
Original description The description as published by the source.
WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge.
References
- advisory lists.opensuse.org
- advisory lists.opensuse.org
- advisory packetstormsecurity.com
- advisory openwall.com
- advisory seclists.org
- advisory security.gentoo.org
- advisory usn.ubuntu.com
- patch gitlab.gnome.org
- patch trac.webkit.org
- report bugs.webkit.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org