Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-domain vulnerability in Enigma Browser 3.8.8 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Enigma Browser跨域漏洞
Vulnerability Description
Enigma Browser 3.8.8版本中存在跨域漏洞。远程攻击者远程攻击者可以借助具有一个数据参数的对象标签，访问其他域内的限制信息。且该数据参数涉及攻击者发端的站点上的一个链接。该链接指明了一个地址HTTP页眉，且该页眉涉及标签站点，这会使通过对象的outerHTML属性就能获得站点内容。该漏洞与CVE-2006-3280相似。
CVSS Information
N/A
Vulnerability Type
N/A