Lucene search
GoogleOSV:CVE-2019-25155HistoryNov 07, 2023 - 3:09 a.m.
CVE-2019-25155
2023-11-0703:09:22
Google
osv.dev
5
dompurify
security
vulnerability
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.1%
DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a ‘rel=“noopener noreferrer”’ attribute.
Related
cve
cve
CVE-2019-25155
2023-11-07 03:09:22
osv
osv
DOMPurify Open Redirect vulnerability
2023-11-14 21:30:51
prion
prion
Code injection
2023-11-07 03:09:00
nvd
nvd
CVE-2019-25155
2023-11-07 03:09:22
github
github
DOMPurify Open Redirect vulnerability
2023-11-14 21:30:51
ubuntucve
ubuntucve
CVE-2019-25155
2023-11-07 00:00:00
cvelist
cvelist
CVE-2019-25155
2023-10-31 00:00:00
veracode
veracode
Reverse Tabnabbing
2023-11-08 07:54:09
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.1%
Related for OSV:CVE-2019-25155