Vulnerabilities

TI-2021-17985 CVE-2021-41146 · GHSA-vw27-fwjf-5qxm

Arbitrary command execution on Windows in qutebrowser

MEDIUM 41

qutebrowser is an open source keyboard-focused browser with a minimal GUI.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01496 Published 2021-10-21 Fixed in 2.4.0 CWE-641

TI-2020-08928 CVE-2020-11054 · GHSA-4rcq-jv2f-898j

Incorrect Provision of Specified Functionality in qutebrowser

LOW 20

In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.0151 Published 2020-05-07 Fixed in 1.11.1 CWE-684

TI-2018-07708 CVE-2018-10895 · GHSA-wgmx-52ph-qqcw

Cross-site request forgery in qutebrowser cross-site request forgery flaw allows sites to…

MEDIUM 42

qutebrowser before version 1.4.1 is vulnerable to a cross-site request forgery flaw that allows websites to access 'qute://*' URLs.

CVSS 3.0CRITICAL 9.3 Network No auth User interaction EPSS 0.01198 Published 2018-07-12 Fixed in 1.4.1 CWE-352

TI-2018-15954 CVE-2018-1000559 · GHSA-m4fw-77v7-924m

qutebrowser version introduced in v0.11.0 (1179ee7)…

LOW 30

qutebrowser version introduced in v0.11.0 (1179ee7a937fb31414d77d9970bac21095358449) contains a Cross Site Scripting (XSS) vulnerability in history command, qute://history page that can result in Via injected JavaScript…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01473 Published 2018-06-26 Fixed in 1.3.3 CWE-79

Vulnerabilities

Filters

Arbitrary command execution on Windows in qutebrowser

Incorrect Provision of Specified Functionality in qutebrowser

Cross-site request forgery in qutebrowser cross-site request forgery flaw allows sites to…

qutebrowser version introduced in v0.11.0 (1179ee7)…