http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html

http://packetstormsecurity.com/files/152485/WebKitGTK-WPE-WebKit-URI-Spoofing-Code-Execution.html

http://www.openwall.com/lists/oss-security/2019/04/11/1

https://bugs.webkit.org/show_bug.cgi?id=194208

https://gitlab.gnome.org/GNOME/epiphany/issues/532

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSCDI3635E37GL4BNJDRDT2KEUBDLGSO/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LACVFU4MYYRPJ3IEA4UCN5KUEAGCCJ72/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNPI3R6QWDJBA5KNGA6QSMKYLY5RRHBZ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UO3DIA54X7FOUWFZW5YXC2MZ6KNHG6SW/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YO5ZBUWOOXMVZPBYLZRDZF6ZQGBYJERQ/

https://seclists.org/bugtraq/2019/Apr/21

https://security.gentoo.org/glsa/201909-05

https://trac.webkit.org/changeset/243434

https://usn.ubuntu.com/3948-1/

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSCDI3635E37GL4BNJDRDT2KEUBDLGSO/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LACVFU4MYYRPJ3IEA4UCN5KUEAGCCJ72/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNPI3R6QWDJBA5KNGA6QSMKYLY5RRHBZ/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UO3DIA54X7FOUWFZW5YXC2MZ6KNHG6SW/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YO5ZBUWOOXMVZPBYLZRDZF6ZQGBYJERQ/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HSCDI3635E37GL4BNJDRDT2KEUBDLGSO/

MITRE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LACVFU4MYYRPJ3IEA4UCN5KUEAGCCJ72/

MITRE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TNPI3R6QWDJBA5KNGA6QSMKYLY5RRHBZ/

MITRE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UO3DIA54X7FOUWFZW5YXC2MZ6KNHG6SW/

MITRE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YO5ZBUWOOXMVZPBYLZRDZF6ZQGBYJERQ/

CWE-20

NVD-CWE-noinfo

https://security.gentoo.org/glsa/201909-05 [No Types Assigned]

OR
     *cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:* versions up to (excluding) 2.24.1
     *cpe:2.3:a:wpewebkit:wpe_webkit:*:*:*:*:*:*:*:* versions up to (excluding) 2.24.1

OR
     *cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
     *cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html Third Party Advisory

http://packetstormsecurity.com/files/152485/WebKitGTK-WPE-WebKit-URI-Spoofing-Code-Execution.html No Types Assigned

http://packetstormsecurity.com/files/152485/WebKitGTK-WPE-WebKit-URI-Spoofing-Code-Execution.html Third Party Advisory, VDB Entry

http://www.openwall.com/lists/oss-security/2019/04/11/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2019/04/11/1 Mailing List, Third Party Advisory

https://bugs.webkit.org/show_bug.cgi?id=194208 No Types Assigned

https://bugs.webkit.org/show_bug.cgi?id=194208 Issue Tracking, Vendor Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HSCDI3635E37GL4BNJDRDT2KEUBDLGSO/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HSCDI3635E37GL4BNJDRDT2KEUBDLGSO/ Mailing List, Release Notes, Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LACVFU4MYYRPJ3IEA4UCN5KUEAGCCJ72/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LACVFU4MYYRPJ3IEA4UCN5KUEAGCCJ72/ Mailing List, Release Notes, Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TNPI3R6QWDJBA5KNGA6QSMKYLY5RRHBZ/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TNPI3R6QWDJBA5KNGA6QSMKYLY5RRHBZ/ Mailing List, Release Notes, Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UO3DIA54X7FOUWFZW5YXC2MZ6KNHG6SW/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UO3DIA54X7FOUWFZW5YXC2MZ6KNHG6SW/ Mailing List, Release Notes, Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YO5ZBUWOOXMVZPBYLZRDZF6ZQGBYJERQ/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YO5ZBUWOOXMVZPBYLZRDZF6ZQGBYJERQ/ Mailing List, Release Notes, Third Party Advisory

https://seclists.org/bugtraq/2019/Apr/21 No Types Assigned

https://seclists.org/bugtraq/2019/Apr/21 Mailing List, Third Party Advisory

https://trac.webkit.org/changeset/243434 No Types Assigned

https://trac.webkit.org/changeset/243434 Patch, Vendor Advisory

https://usn.ubuntu.com/3948-1/ No Types Assigned

https://usn.ubuntu.com/3948-1/ Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HSCDI3635E37GL4BNJDRDT2KEUBDLGSO/ [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UO3DIA54X7FOUWFZW5YXC2MZ6KNHG6SW/ [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LACVFU4MYYRPJ3IEA4UCN5KUEAGCCJ72/ [No Types Assigned]

embed/ephy-web-view.c in GNOME Web (aka Epiphany) through 3.31.4 allows address bar spoofing because a page load triggered by JavaScript leads to updating an address as if it were triggered by a safer visit type (e.g., VISIT_LINK, VISIT_TYPED, VISIT_BOOKMARK, or VISIT_HOMEPAGE). This is similar to the CVE-2018-8383 issue in Microsoft Edge.

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge.

https://bugs.webkit.org/show_bug.cgi?id=194208 [No Types Assigned]

https://trac.webkit.org/changeset/243434 [No Types Assigned]

https://usn.ubuntu.com/3948-1/ [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TNPI3R6QWDJBA5KNGA6QSMKYLY5RRHBZ/ [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YO5ZBUWOOXMVZPBYLZRDZF6ZQGBYJERQ/ [No Types Assigned]

http://packetstormsecurity.com/files/152485/WebKitGTK-WPE-WebKit-URI-Spoofing-Code-Execution.html [No Types Assigned]

http://www.openwall.com/lists/oss-security/2019/04/11/1 [No Types Assigned]

https://seclists.org/bugtraq/2019/Apr/21 [No Types Assigned]

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

(AV:N/AC:M/Au:N/C:P/I:P/A:N)

CWE-20

OR
     *cpe:2.3:a:gnome:epiphany:*:*:*:*:*:*:*:* versions up to (including) 3.31.4

https://gitlab.gnome.org/GNOME/epiphany/issues/532 No Types Assigned

https://gitlab.gnome.org/GNOME/epiphany/issues/532 Exploit, Patch, Third Party Advisory

Victim must voluntarily interact with attack mechanism