epiphany is vulnerable to cross-site scripting. The vulnerability exists due to server's suggestedfilename is used as the pdfname value in PDF.js...
6.1CVSS1.4AI score0.01294EPSS
SaveExploits1References4Affected Software3
OSV•added 2021/12/16 3:15 a.m.•3 views
UBUNTU-CVE-2021-45086
XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 because a server's suggestedfilename is used as the pdfname value in PDF.js...
