Lucene search
PRIOn knowledge basePRION:CVE-2018-10895HistoryJul 12, 2018 - 12:29 p.m.
Cross site request forgery (csrf)
2018-07-1212:29:00
PRIOn knowledge base
www.prio-n.com
5
qutebrowser before version 1.4.1 is vulnerable to a cross-site request forgery flaw that allows websites to access ‘qute://*’ URLs. A malicious website could exploit this to load a ‘qute://settings/set’ URL, which then sets ‘editor.command’ to a bash script, resulting in arbitrary code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| qutebrowser | lt | 1.4.1 |
Related
cve
cve
CVE-2018-10895
2018-07-12 12:29:00
nessus
nessus
Fedora 28 : qutebrowser (2018-61dbd4a787)
2019-01-03 00:00:00
Fedora 27 : qutebrowser (2018-35325c9faf)
2018-07-24 00:00:00
osv
osv
PYSEC-2018-27
2018-07-12 12:29:00
Qutebrowser CSRF Vulnerability
2018-10-10 16:05:23
CVE-2018-10895
2018-07-12 12:29:00
freebsd
freebsd
qutebrowser -- Remote code execution due to CSRF
2018-07-11 00:00:00
ubuntucve
ubuntucve
CVE-2018-10895
2018-07-12 00:00:00
archlinux
archlinux
[ASA-201807-3] qutebrowser: arbitrary code execution
2018-07-11 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: qutebrowser-1.4.1-1.fc28
2018-07-19 18:06:56
[SECURITY] Fedora 27 Update: qutebrowser-1.4.1-1.fc27
2018-07-19 17:49:02
nvd
nvd
CVE-2018-10895
2018-07-12 12:29:00
github
github
Qutebrowser CSRF Vulnerability
2018-10-10 16:05:23
debiancve
debiancve
CVE-2018-10895
2018-07-12 12:29:00
openvas
openvas
Fedora Update for qutebrowser FEDORA-2018-35325c9faf
2018-07-20 00:00:00
Fedora Update for qutebrowser FEDORA-2018-61dbd4a787
2018-07-20 00:00:00
openSUSE: Security Advisory for qutebrowser (openSUSE-SU-2018:2120-1)
2018-10-26 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2018-07-12 07:56:01
cvelist
cvelist
CVE-2018-10895
2018-07-12 12:00:00
suse
suse
Security update for qutebrowser (moderate)
2018-07-28 15:59:49