Skip to content
OpenAdvisories
Unscored CVE-2019-3562 EUVD-2019-13199GHSA-3r49-5cp4-92j3

A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute cod…

Published Apr 29, 2019 · Updated Aug 4, 2024 · Assigned by facebook

Vendor: Oculus Product: Oculus Browser

Description

A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code. This affects the Oculus Browser starting from version 5.2.7 until 5.7.11.

Affected products

VendorProductAffectedFixed
Oculus Oculus Browser 5.7.11, 5.2.7 – < unspecified unspecified

References