Package · Debian

qutebrowser

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.3

CVE-2018-10895

Qutebrowser CSRF Vulnerability

qutebrowser before version 1.4.1 is vulnerable to a cross-site request forgery flaw that allows websites to access 'qute://*' URLs. A malicious website could exploit this to load a 'qute://settings/set' URL, which then sets 'editor.command' to a bash script, …

qutebrowser cross-site request forgery flaw allows sites to access 'qute qutebrowser qutebrowser Debian Ubuntu PyPI

Jul 12, 2018