CVE-2019-6251
CVSS v3
8.1
HIGH
EPSS Score
2.4 %
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge.
Technical details
- Published
- 2019-01-14
Frequently asked questions
What is CVE-2019-6251?
WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge.
Is CVE-2019-6251 actively exploited?
Active exploitation of CVE-2019-6251 has not been confirmed. The EPSS score is 2.4%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2019-6251?
CVE-2019-6251 has a CVSS v3 base score of 8.1 (HIGH severity).
Is CVE-2019-6251 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 500 free checks/month · Free API key
Other 2019 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).