Unrated

Mailvelope prior to 3.3.0 does not require user interaction to import public keys shown on web page. This functionality can be tricked to either hide...

CVE-2019-9150 First seen on SecPulse Jul 10, 2019

Original description The description as published by the source.

Mailvelope prior to 3.3.0 does not require user interaction to import public keys shown on web page. This functionality can be tricked to either hide a key import from the user or obscure which key was imported.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
web bsi.bund.de
web bsi.bund.de

Key facts

Severity: Unrated
Published: Jul 10, 2019
First seen on SecPulse: Jul 10, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51