CVE-2025-3839
Epiphany: insecure external protocol invocation in epiphany
Résumé
Epiphany: insecure external protocol invocation in epiphany
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this action, resulting in potential code execution on the client device via trusted UI behavior.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2025-3839 epiphany-browser
Références
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- package gitlab.gnome.org
- report bugzilla.redhat.com