Vulnerability · Published Apr 8, 2020 · Assigned by GitHub_M
CVE-2020-11000Improper URL validation in GreenBrowser
Medium 5.7
In plain English
A medium-severity security flaw in GreenBrowser from luchua-bc. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 69% of all known vulnerabilities).
Severity (CVSS 3.1)5.7Medium
Exploit odds (30 days)1.2%top 30.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
GreenBrowser before version 1.2 has a vulnerability where apps that rely on URL Parsing to verify that a given URL is pointing to a trust server may be susceptible to many different ways to get URL parsing and verification wrong, which allows an attacker to circumvent the access control. This problem has been patched in version 1.2.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| luchua-bc | GreenBrowser | < 1.2 |
Weakness: CWE-939 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N