GNOME Web (Epiphany) 3.23 before 3.23.5, 3.22 before 3.22.6, 3.20 before 3.20.7, 3.18 before 3.18.11, and prior versions, is vulnerable to a password manager sweep attack resulting in the remote exfiltration of stored passwords for a selected set of websites.
2017-07-17T13:18:16.703
2025-04-20T01:37:25.860
Deferred
CVSSv3.0: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:P/I:N/A:N
10.0
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | gnome | epiphany | 3.18.0 | Yes |
| Application | gnome | epiphany | 3.18.1 | Yes |
| Application | gnome | epiphany | 3.18.2 | Yes |
| Application | gnome | epiphany | 3.18.3 | Yes |
| Application | gnome | epiphany | 3.18.4 | Yes |
| Application | gnome | epiphany | 3.18.5 | Yes |
| Application | gnome | epiphany | 3.18.6 | Yes |
| Application | gnome | epiphany | 3.18.7 | Yes |
| Application | gnome | epiphany | 3.18.8 | Yes |
| Application | gnome | epiphany | 3.18.9 | Yes |
| Application | gnome | epiphany | 3.18.10 | Yes |
| Application | gnome | epiphany | 3.20.0 | Yes |
| Application | gnome | epiphany | 3.20.1 | Yes |
| Application | gnome | epiphany | 3.20.2 | Yes |
| Application | gnome | epiphany | 3.20.3 | Yes |
| Application | gnome | epiphany | 3.20.4 | Yes |
| Application | gnome | epiphany | 3.20.5 | Yes |
| Application | gnome | epiphany | 3.20.6 | Yes |
| Application | gnome | epiphany | 3.22.0 | Yes |
| Application | gnome | epiphany | 3.22.1 | Yes |
| Application | gnome | epiphany | 3.22.2 | Yes |
| Application | gnome | epiphany | 3.22.3 | Yes |
| Application | gnome | epiphany | 3.22.4 | Yes |
| Application | gnome | epiphany | 3.22.5 | Yes |
| Application | gnome | epiphany | 3.23.1 | Yes |
| Application | gnome | epiphany | 3.23.1.1 | Yes |
| Application | gnome | epiphany | 3.23.1.2 | Yes |
| Application | gnome | epiphany | 3.23.2 | Yes |
| Application | gnome | epiphany | 3.23.2.1 | Yes |
| Application | gnome | epiphany | 3.23.3 | Yes |
| Application | gnome | epiphany | 3.23.4 | Yes |