CVE-2019-18949

SnowHaze before 2.6.6 is sometimes too late to honor a per-site JavaScript blocking setting, which leads to unintended JavaScript execution via a chain of webpage redirections targeted to the user's browser configuration...

CVE-2019-18949

SnowHaze vulnerable to unintended JavaScript execution before 2.6.6 due to a delay in honoring per-site JavaScript blocking during a chain of webpage redirections. Affected: SnowHaze prior to 2.6.6. Root cause: failure to timely apply per-site JS blocking settings under redirection sequences. Imp...