Home > Vulnerability Database > CVE-2019-6251

Mend.io Vulnerability Database

CVE-2019-6251

Date: January 14, 2019

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge.

Language: C

Severity Score

8.1

Related Resources (26)

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HSCDI3635E37GL4BNJDRDT2KEUBDLGSO/

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LACVFU4MYYRPJ3IEA4UCN5KUEAGCCJ72/

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UO3DIA54X7FOUWFZW5YXC2MZ6KNHG6SW/

Url: https://access.redhat.com/security/cve/CVE-2019-6251

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2019-6251

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TNPI3R6QWDJBA5KNGA6QSMKYLY5RRHBZ/

Url: https://nvd.nist.gov/vuln/detail/CVE-2019-6251

Url: https://seclists.org/bugtraq/2019/Apr/21

Url: https://gitlab.gnome.org/GNOME/epiphany/issues/532

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LACVFU4MYYRPJ3IEA4UCN5KUEAGCCJ72/

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UO3DIA54X7FOUWFZW5YXC2MZ6KNHG6SW/

Url: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html

Url: https://trac.webkit.org/changeset/243434

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNPI3R6QWDJBA5KNGA6QSMKYLY5RRHBZ/

Url: http://www.openwall.com/lists/oss-security/2019/04/11/1

Url: https://security-tracker.debian.org/tracker/CVE-2019-6251

Url: https://security.alpinelinux.org/vuln/CVE-2019-6251

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YO5ZBUWOOXMVZPBYLZRDZF6ZQGBYJERQ/

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSCDI3635E37GL4BNJDRDT2KEUBDLGSO/

Url: https://bugs.webkit.org/show_bug.cgi?id=194208

Url: https://security.gentoo.org/glsa/201909-05

Url: https://usn.ubuntu.com/3948-1/

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YO5ZBUWOOXMVZPBYLZRDZF6ZQGBYJERQ/

Url: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html

Url: http://packetstormsecurity.com/files/152485/WebKitGTK-WPE-WebKit-URI-Spoofing-Code-Execution.html

Url: https://www.mend.io/vulnerability-database/CVE-2019-6251

Severity Score

8.1

Weakness Type (CWE)

Improper Input Validation

CWE-20

Insufficient Information

NVD-CWE-noinfo

CVSS v3.1

Base Score:	8.1
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	NONE

CVSS v2

Base Score:	5.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2019-6251

Date: January 14, 2019

Language: C

Severity Score

Related Resources (26)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?