CVE-2015-5236

2022-07-0715:54:03

CWE-345

redhat

www.cve.org

0.002 Low

EPSS

Percentile

58.9%

JSON

It was discovered that the IcedTea-Web used codebase attribute of the <applet> tag on the HTML page that hosts Java applet in the Same Origin Policy (SOP) checks. As the specified codebase does not have to match the applet’s actual origin, this allowed malicious site to bypass SOP via spoofed codebase value.

CNA Affected

[
  {
    "product": "Icedtea-web",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Unkown"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1256403

0.002 Low

EPSS

Percentile

58.9%

JSON

Related for CVELIST:CVE-2015-5236