Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DuckDuckGo WebRTC组件安全漏洞
Vulnerability Description
DuckDuckGo是一款使用在浏览器中的扩展程序。用于匿名访问网络。WebRTC component是使用在其中的一个支持浏览器进行实时语音对话或视频对话的组件。 DuckDuckGo 4.2.0版本中的WebRTC组件存在安全漏洞。攻击者可利用该漏洞在STUN请求中获取私有IP地址。
CVSS Information
N/A
Vulnerability Type
N/A