Vendors / qutebrowser Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now qutebrowser records in CISA KEV No qutebrowser vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 42
qutebrowser before version 1.4.1 is vulnerable to a cross-site request forgery flaw that allows websites to access 'qute://*' URLs.
CVSS 3.0 CRITICAL 9.3· Network · No auth · User interaction · EPSS 0.01198 · Published 2018-07-12 · Fixed in 1.4.1 CWE-352
Priority MEDIUM 41
qutebrowser is an open source keyboard-focused browser with a minimal GUI.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01496 · Published 2021-10-21 · Fixed in 2.4.0 CWE-641
Priority LOW 30
qutebrowser version introduced in v0.11.0 (1179ee7a937fb31414d77d9970bac21095358449) contains a Cross Site Scripting (XSS) vulnerability in history command, qute://history page that can result in Via injected JavaScript…
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01473 · Published 2018-06-26 · Fixed in 1.3.3 CWE-79
Priority LOW 20
In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL.
CVSS 3.1 LOW 3.5· Network · Low privileges · User interaction · EPSS 0.0151 · Published 2020-05-07 · Fixed in 1.11.1 CWE-684
Open these records in search → All records by CVSS severity
1 1 1 1 0
THREATIST.IORead the docs