ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2022.0053
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2022-0053)
Resumen:	The remote host is missing an update for the 'epiphany' package(s) announced via the MGASA-2022-0053 advisory.
Descripción:	Summary: The remote host is missing an update for the 'epiphany' package(s) announced via the MGASA-2022-0053 advisory. Vulnerability Insight: XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list (CVE-2021-45085). XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used as the pdf_name value in PDF.js (CVE-2021-45086). XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used, as demonstrated by a page title (CVE-2021-45087). XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an error page (CVE-2021-45088). Affected Software/OS: 'epiphany' package(s) on Mageia 8. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2021-45085 Debian Security Information: DSA-5042 (Google Search) https://www.debian.org/security/2022/dsa-5042 https://gitlab.gnome.org/GNOME/epiphany/-/issues/1612 https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1045 https://lists.debian.org/debian-lts-announce/2022/08/msg00006.html Common Vulnerability Exposure (CVE) ID: CVE-2021-45086 Common Vulnerability Exposure (CVE) ID: CVE-2021-45087 Common Vulnerability Exposure (CVE) ID: CVE-2021-45088
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.