Vulnerability Description
Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature.
CVSS Score
6.1
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vimium Project | Vimium | <= 1.66 |
Related Weaknesses (CWE)
References
- https://github.com/philc/vimium/issues/3832ExploitThird Party Advisory
- https://github.com/philc/vimium/pull/3850Third Party Advisory
- https://github.com/philc/vimium/issues/3832ExploitThird Party Advisory
- https://github.com/philc/vimium/pull/3850Third Party Advisory
FAQ
What is CVE-2021-37518?
CVE-2021-37518 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature.
How severe is CVE-2021-37518?
CVE-2021-37518 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-37518?
Check the references section above for vendor advisories and patch information. Affected products include: Vimium Project Vimium.