Sploitus

CVE-2021-45086

No indexed exploits for CVE-2021-45086 yet

XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used as the pdf_name value in PDF.js.

Affected products
Alt Linux, Gnome Web, Linuxmint, Pdf.Js, Ubuntu
Gnome Epiphany
< 40.4, 41.1
Fix
Available
CVSS 3.1
6.1 MEDIUM
EPSS
1.3% (68th percentile)
Weakness
CWE-79
NVD status
Modified
Published
2021-12-16
CVE-2021-45086 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2021-45086 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2021-45086 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.