VDB
GCVE-VVD-MAGEIA-2022-53
GCVE-VVD-MAGEIA-2022-53
Advisory Published
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1
via an about: page, as demonstrated by ephy-about:overview when a user
visits an XSS payload page often enough to place that page on the Most
Visited list (CVE-2021-45085).
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1
because a server's suggested_filename is used as the pdf_name value in
PDF.js (CVE-2021-45086).
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1
when View Source mode or Reader mode is used, as demonstrated by a page
title (CVE-2021-45087).
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1
via an error page (CVE-2021-45088).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | foxtrotgps | 0 (affected), 1.2.2-4.2.mga8 (unaffected) | — |
| Mageia | epiphany | 0 (affected), 3.38.2-1.1.mga8 (unaffected), 0 (affected), 3.38.2-1.1.mga8 (unaffected) | — |
References
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.