CVE-2018-8383

Published: Aug 15, 2018Modified: Nov 21, 2024

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8388.

Affected (1)

Products: Microsoft: Edge

Microsoft

1 product

Edge

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Edge	All versions

Related CWEs

CWE-290

Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

References (10)

http://www.openwall.com/lists/oss-security/2019/04/11/1

Source: secure@microsoft.com

http://www.securityfocus.com/bid/105024

Source: secure@microsoft.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1041457

Source: secure@microsoft.com

Third Party AdvisoryVDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8383

Source: secure@microsoft.com

PatchVendor Advisory

https://seclists.org/bugtraq/2019/Apr/21

Source: secure@microsoft.com

http://www.openwall.com/lists/oss-security/2019/04/11/1