CVE-2016-8505 in Javascript

摘要

由 MITRE

XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• 预定: 2016-10-07
• 披露: 2016-10-26
• 管理: 已接受
• 条目: VDB-93114
• CPE: 准备好
• CWE: CWE-79 (已确认)
• CVSS: 6.1 (NVD)
• EPSS: 0.00850
• KEV: 否
• 活动: 非常低
• 部门: Chemical, Telecommunication, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-8505
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-8505
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-8505/