CVE-2016-8505 in Javascript

सारांश

द्वारा MITRE

XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• आरक्षित करना: 07/10/2016
• प्रकटीकरण: 26/10/2016
• संयम: स्वीकृत
• प्रविष्टि: VDB-93114
• CPE: तैयार
• CWE: CWE-79 (पुष्टि की गई)
• CVSS: 6.1 (NVD)
• EPSS: 0.00850
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Finance, Education, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-8505
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-8505
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-8505/