GNOME Web (Epiphany) 3.23 before 3.23.5, 3.22 before 3.22.6, 3.20 before 3.20.7, 3.18 before 3.18.11, and prior versions, is vulnerable to a password manager sweep attack resulting in the remote exfiltration of stored passwords for a selected set of websites.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "3.18.0"
},
{
"introduced": "0"
},
{
"last_affected": "3.18.1"
},
{
"introduced": "0"
},
{
"last_affected": "3.18.2"
},
{
"introduced": "0"
},
{
"last_affected": "3.18.3"
},
{
"introduced": "0"
},
{
"last_affected": "3.18.4"
},
{
"introduced": "0"
},
{
"last_affected": "3.18.5"
},
{
"introduced": "0"
},
{
"last_affected": "3.18.6"
},
{
"introduced": "0"
},
{
"last_affected": "3.18.7"
},
{
"introduced": "0"
},
{
"last_affected": "3.18.8"
},
{
"introduced": "0"
},
{
"last_affected": "3.18.9"
},
{
"introduced": "0"
},
{
"last_affected": "3.18.10"
},
{
"introduced": "0"
},
{
"last_affected": "3.20.0"
},
{
"introduced": "0"
},
{
"last_affected": "3.20.1"
},
{
"introduced": "0"
},
{
"last_affected": "3.20.2"
},
{
"introduced": "0"
},
{
"last_affected": "3.20.3"
},
{
"introduced": "0"
},
{
"last_affected": "3.20.4"
},
{
"introduced": "0"
},
{
"last_affected": "3.20.5"
},
{
"introduced": "0"
},
{
"last_affected": "3.20.6"
},
{
"introduced": "0"
},
{
"last_affected": "3.22.0"
},
{
"introduced": "0"
},
{
"last_affected": "3.22.1"
},
{
"introduced": "0"
},
{
"last_affected": "3.22.2"
},
{
"introduced": "0"
},
{
"last_affected": "3.22.3"
},
{
"introduced": "0"
},
{
"last_affected": "3.22.4"
},
{
"introduced": "0"
},
{
"last_affected": "3.22.5"
},
{
"introduced": "0"
},
{
"last_affected": "3.23.1"
},
{
"introduced": "0"
},
{
"last_affected": "3.23.1.1"
},
{
"introduced": "0"
},
{
"last_affected": "3.23.1.2"
},
{
"introduced": "0"
},
{
"last_affected": "3.23.2"
},
{
"introduced": "0"
},
{
"last_affected": "3.23.2.1"
},
{
"introduced": "0"
},
{
"last_affected": "3.23.3"
},
{
"introduced": "0"
},
{
"last_affected": "3.23.4"
}
]
}