Vulnerability Intelligence Report
Improper URL validation in GreenBrowser
CVE-2020-11000
GreenBrowser before version 1.2 has a vulnerability where apps that rely on URL Parsing to verify that a given URL is pointing to a trust server may be susceptible to many different ways to get URL parsing and verification wrong, which allows an attacker to circumvent the access control. This problem has been patched in version 1.2.
No Active Exploit Signals
CVSS Base Score
5.7
MEDIUM
Exploitability:2.1
Impact Score:3.6
EPSS Probability:1.21%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-939 ↗CWE-939: Improper Authorization in Handler for Custom URL Scheme
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| luchua-bc | GreenBrowser | < 1.2 (affected) |
Threat Intelligence Signals
EPSS Score
1.212%
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | GitHub, Inc. · Vendor · USA |
| Reserved | 2020-03-30T00:00:00 |
| Published | 2020-04-08T16:30:15 |
| Last Updated | 2024-08-04T11:21:14 |
Community Chatter & Buzz