qutebrowser version introduced in v0.11.0 (1179ee7a937fb31414d77d9970bac21095358449) contains a Cross Site Scripting (XSS) vulnerability in history command, qute://history page that can result in Via injected JavaScript code, a website can steal the user's browsing history. This attack appear to be exploitable via the victim must open a page with a specially crafted <title> attribute, and then open the qute://history site via the :history command. This vulnerability appears to have been fixed in fixed in v1.3.3 (4c9360237f186681b1e3f2a0f30c45161cf405c7, to be released today) and v1.4.0 (5a7869f2feaa346853d2a85413d6527c87ef0d9f, released later this week).

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - qutebrowser version introduced in v0.11.0 (1179ee7a937fb31414d77d9970bac21095358449) contains a Cross Site     Scripting (XSS) vulnerability in history command, qute://history page that can result in Via injected     JavaScript code, a website can steal the user's browsing history. This attack appear to be exploitable via     the victim must open a page with a specially crafted <title> attribute, and then open the qute://history     site via the :history command. This vulnerability appears to have been fixed in fixed in v1.3.3     (4c9360237f186681b1e3f2a0f30c45161cf405c7, to be released today) and v1.4.0     (5a7869f2feaa346853d2a85413d6527c87ef0d9f, released later this week). (CVE-2018-1000559)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - qutebrowser version introduced in v0.11.0 (1179ee7a937fb31414d77d9970bac21095358449) contains a Cross Site
    Scripting (XSS) vulnerability in history command, qute://history page that can result in Via injected
    JavaScript code, a website can steal the user's browsing history. This attack appear to be exploitable via
    the victim must open a page with a specially crafted <title> attribute, and then open the qute://history
    site via the :history command. This vulnerability appears to have been fixed in fixed in v1.3.3
    (4c9360237f186681b1e3f2a0f30c45161cf405c7, to be released today) and v1.4.0
    (5a7869f2feaa346853d2a85413d6527c87ef0d9f, released later this week). (CVE-2018-1000559)

This update for qutebrowser fixes the following issues :

Security issue fixed :

  - CVE-2018-1000559: Fix an XSS issue on qute://history     (boo#1101507).

  - CVE-2018-10895: Fix CSRF issue on the qute://settings     page (boo#1100968).

This update for qutebrowser fixes the following issues :

Security issue fixed :

  - CVE-2018-1000559: Fix an XSS issue on qute://history     (boo#1101507).

ID	Name	Product	Family	Type	Severity
254826	Linux Distros Unpatched Vulnerability : CVE-2018-1000559	Nessus	Misc.	Local	medium
422608	SCA: security update for qutebrowser (GHSA-m4fw-77v7-924m)	Tenable Cloud Security	SCA Checks	Local	medium
422608	SCA: security update for qutebrowser (GHSA-m4fw-77v7-924m)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
123232	openSUSE Security Update : qutebrowser (openSUSE-2019-545)	Nessus	SuSE Local Security Checks	Local	high
111427	openSUSE Security Update : qutebrowser (openSUSE-2018-775)	Nessus	SuSE Local Security Checks	Local	high
111426	openSUSE Security Update : qutebrowser (openSUSE-2018-774)	Nessus	SuSE Local Security Checks	Local	medium

Detections

Analytics

CVE-2018-1000559

medium

Tenable Plugins

medium

medium

medium

high

high

medium