Veracode Vulnerability DatabaseVERACODE:38694Information Disclosure
0.001 Low
EPSS
Percentile
50.7%
webkitgtk is vulnerable to information disclosure. Processing maliciously crafted web content may disclose sensitive user information due to improper cookie management, which allows a remote attacker to trick the victim into parsing maliciously crafted web content, triggering the vulnerability and gaining access to potentially sensitive information.
References
www.openwall.com/lists/oss-security/2022/07/05/3
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index
access.redhat.com/errata/RHSA-2022:8054
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=2104787
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33BWWAQLLBHKGSI332ZZCORTFZ2XLOIH/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ANNHXXARVBRGI74TVQNZOAG6P7AGSMUJ/
lists.fedoraproject.org/archives/list/[email protected]/message/33BWWAQLLBHKGSI332ZZCORTFZ2XLOIH/
lists.fedoraproject.org/archives/list/[email protected]/message/ANNHXXARVBRGI74TVQNZOAG6P7AGSMUJ/
security.gentoo.org/glsa/202208-39
support.apple.com/en-us/HT213184
support.apple.com/en-us/HT213185
webkitgtk.org/security/WSA-2022-0006.html
Related
