CVE-2019-0678 PoC — Microsoft Edge 权限许可和访问控制漏洞

Source

https://github.com/sharmasandeepkr/CVE-2019-0678

Associated Vulnerability

Title:Microsoft Edge 权限许可和访问控制漏洞 (CVE-2019-0678)
Description:Microsoft Edge是美国微软（Microsoft）公司的一款Windows 10之后版本系统附带的Web浏览器。 Microsoft Edge中存在提权漏洞，该漏洞源于程序没有正确地实施跨域策略。远程攻击者可利用该漏洞访问信息并向其他域注入该信息。

Description

Microsoft Edge Elevation of Privilege Vulnerability

Readme

## Vulnerability

Microsoft Edge Elevation of Privilege Vulnerability

## Vulnerability Description 

This vulnerability allows an attacker to execute javascript code on every host without the permission, also an attacker can steal local system files, and this also results in changing internal developer settings in Microsoft Edge. 

## CVE-ID

CVE-2019-0678

## Vendor

Microsoft

## Product

Microsoft Edge

## Disclosure Timeline

1. 28 November 2018 reported to the vendor 
2. 03 December 2019 coordinated public release of advisory

## Credits

Nikhil Mittal

File Snapshot


 [4.0K]  /data/pocs/a9a097b9de3393a013758e43795899a3dba4aa95
└── [ 565]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!