CVE-2025-3839
Epiphany: insecure external protocol invocation in epiphany
概要
Epiphany: insecure external protocol invocation in epiphany
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this action, resulting in potential code execution on the client device via trusted UI behavior.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2025-3839 epiphany-browser
参照URL
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- package gitlab.gnome.org
- report bugzilla.redhat.com