CVE-2019-6251

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2019-6251

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-6251.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2019-6251

Downstream

DEBIAN (1)

DEBIAN-CVE-2019-6251

openSUSE (2)

RHSA (2)

RLSA (1)

RLSA-2019:3553

SUSE (2)

UBUNTU (1)

UBUNTU-CVE-2019-6251

USN-3948-1

Related

openSUSE (2)

SUSE (2)

Published

2019-01-14T08:29:00Z

Modified

2026-09-25T08:07:29Z

Severity

8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N CVSS Calculator

Summary

[none]

Details

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge.

Database specific

{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "18.04"
                },
                {
                    "last_affected":  "18.04"
                },
                {
                    "introduced":  "18.10"
                },
                {
                    "last_affected":  "18.10"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "canonical:ubuntu_linux"
        },
        {
            "cpes":  [
                "cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "28"
                },
                {
                    "last_affected":  "28"
                },
                {
                    "introduced":  "29"
                },
                {
                    "last_affected":  "29"
                },
                {
                    "introduced":  "30"
                },
                {
                    "last_affected":  "30"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "fedoraproject:fedora"
        },
        {
            "cpes":  [
                "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "15.0"
                },
                {
                    "last_affected":  "15.0"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "opensuse:leap"
        }
    ]
}

References

Affected packages

Git / gitlab.gnome.org/gnome/epiphany

Affected ranges

Type

GIT

Repo

https://gitlab.gnome.org/gnome/epiphany

Events

Introduced

Last Affected

312222a905de76adec9c77c986254f5837935e61

Fixed

90ff11dccc9ec8649bfff0b0f6798d51d3b2eaf1

Introduced

6cdf86702e747867b2f4b338429733f84f554f80

Last Affected

6cdf86702e747867b2f4b338429733f84f554f80

Database specific

Show details

{
    "cpe":  [
        "cpe:2.3:a:gnome:epiphany:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:wpewebkit:wpe_webkit:*:*:*:*:*:*:*:*",
        "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*"
    ],
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "last_affected":  "3.31.4"
        },
        {
            "fixed":  "2.24.1"
        },
        {
            "introduced":  "42.3"
        },
        {
            "last_affected":  "42.3"
        }
    ],
    "source":  [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

2.*

2.27.4

2.27.5

2.27.90

2.27.91

2.27.92

2.29.1

2.29.3

2.29.5

2.29.6

2.29.90

2.29.91

2.29.92

2.30

2.30.1

2.30.2

2.31.2

2.31.4

2.31.5

2.91.1

2.91.1.1

2.91.2

2.91.3

2.91.4

2.91.4.1

2.91.5

2.91.6

2.91.90

2.91.91

2.91.91.1

2.91.92

3.*

3.0.0

3.1.2

3.1.5

3.1.90

3.1.91

3.1.91.1

3.1.92

3.10.0

3.10.1

3.11.1

3.11.2

3.11.3

3.11.4

3.11.90

3.11.91

3.11.92

3.12.0

3.12.1

3.13.90

3.13.91

3.14.0

3.14.1

3.15.1

3.15.90

3.15.92

3.16.0

3.16.1

3.17.1

3.17.2

3.17.91

3.18.0

3.19.1

3.19.90

3.19.91

3.19.92

3.2.0

3.20.0

3.21.1

3.21.2

3.21.3

3.21.4

3.23.1

3.23.1.1

3.23.1.2

3.23.2

3.23.2.1

3.23.3

3.23.4

3.23.5

3.23.90

3.23.91

3.23.91.1

3.23.92

3.23.93

3.24.0

3.24.1

3.25.1

3.25.2

3.25.3

3.25.4

3.25.90

3.25.91

3.25.92

3.26.0

3.27.1

3.27.2

3.27.3

3.27.4

3.27.90

3.29.1

3.29.2

3.29.3

3.29.4

3.29.90

3.29.91

3.29.92

3.3.1

3.3.2

3.3.3

3.3.4

3.3.4.1

3.3.5

3.3.90

3.3.91

3.3.92

3.31.1

3.31.2

3.31.3

3.31.4

3.5.1

3.5.3

3.5.4

3.5.5

3.5.90

3.5.91.1

3.5.92

3.6.0

3.7.1

3.7.3

3.7.5

3.7.90

3.7.91

3.7.92

3.9.2

3.9.3

3.9.90

3.9.91

42.*

42.3

Other

BEFORE_HARVES18

GNOME_2_10_ANCHOR

GNOME_2_12_BRANCHPOINT

GNOME_2_14_BRANCHPOINT

GNOME_2_16_BRANCHPOINT

GNOME_2_18_BRANCHPOINT

GTK_ENGINES_2_6_0

INITIAL

PRE_GNOME_2_14_BRANCHPOINT

RELEASE_2_14_0

RELEASE_2_15_1

RELEASE_2_15_2

RELEASE_2_15_3

RELEASE_2_15_4

RELEASE_2_15_92

RELEASE_2_16_0

RELEASE_2_17_2

RELEASE_2_17_3

RELEASE_2_17_4

RELEASE_2_17_5

RELEASE_2_17_90

RELEASE_2_17_91

RELEASE_2_17_92

RELEASE_2_18_0

RELEASE_2_19_2

RELEASE_2_19_5

RELEASE_2_19_6

RELEASE_2_19_90

RELEASE_2_21_4

RELEASE_2_21_5

RELEASE_2_21_90

RELEASE_2_21_92

RELEASE_2_22_0

RELEASE_2_22_1

RELEASE_2_22_1_1

RELEASE_2_22_2

RELEASE_2_22_3

RELEASE_2_23_90

RELEASE_2_23_91

RELEASE_2_24_0

RELEASE_2_24_0_1

RELEASE_2_5_91

Release070

Release072

Release073

Release081

Release082

Release083

Release090

Release091

Release092

Release110

Release111

Release1110

Release1111

Release1112

Release112

Release113

Release115

Release117

Release119

Release120

Release130

Release131

Release132

Release133

Release134

Release135

Release136

Release137

Release138

Release151

Release152

Release153

Release154

Release155

Release156

Release157

Release158

Release160

Release171

Release172

Release173

Release174

Release175

Release176

Release191

Release192

Release193

Release1931

Release194

Release195

Release1951

Release196

Release198

Release1999

WEBCORE_BRANCHPOINT

WEBKIT_BRANCHPOINT

XULRUNNER_BRANCHPOINT

gnome-2-8-branchpoint

help

pre-gnome-2-10-branchpoint

actual-2.*

actual-2.29.6

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-6251.json"

vanir_signatures

[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "280217498963693835361640773540379045260",
            "length":  285
        },
        "id":  "CVE-2019-6251-795780e3",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://gitlab.gnome.org/gnome/epiphany@90ff11dccc9ec8649bfff0b0f6798d51d3b2eaf1",
        "target":  {
            "file":  "embed/mozilla/EphyBrowser.cpp",
            "function":  "EphyBrowser::GetZoom"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "112994298578260489384232297981810457079",
                "113679691485130390442816717913391965602",
                "317795134385166186332082367165067877476",
                "321447526086893611645791588300872804206",
                "254239933228547055354975029311757318929",
                "257353090739890117173341275999375827526",
                "142446095654114568526665159810781226508",
                "290746114902061128982667762262158606549",
                "329090681288389353922874237156328720966",
                "75003349598807836398390348937204310041",
                "12759740255472730088023363353834283962",
                "253442426519084472750159057954832669890",
                "187580687179852448667202569530663075263",
                "155003032646736586305913927746258463146",
                "68841807241347711650295396263331120029",
                "300818058638566920214220994966172762599"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2019-6251-7a318712",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://gitlab.gnome.org/gnome/epiphany@90ff11dccc9ec8649bfff0b0f6798d51d3b2eaf1",
        "target":  {
            "file":  "embed/mozilla/EphyBrowser.cpp"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "115471298233690573233237567317369582136",
            "length":  68
        },
        "id":  "CVE-2019-6251-9700a261",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://gitlab.gnome.org/gnome/epiphany@90ff11dccc9ec8649bfff0b0f6798d51d3b2eaf1",
        "target":  {
            "file":  "embed/mozilla/EphyBrowser.cpp",
            "function":  "mInitialized"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "80880418477633107266816666995405977945",
                "22026331254984029968852414808662658502",
                "290489139693102052083707938951297572025",
                "87599472823503325245203110047974051749"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2019-6251-e719b140",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://gitlab.gnome.org/gnome/epiphany@90ff11dccc9ec8649bfff0b0f6798d51d3b2eaf1",
        "target":  {
            "file":  "embed/mozilla/EphyBrowser.h"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "2085925539773229625148503975721002249",
            "length":  283
        },
        "id":  "CVE-2019-6251-ed1ad9bb",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://gitlab.gnome.org/gnome/epiphany@90ff11dccc9ec8649bfff0b0f6798d51d3b2eaf1",
        "target":  {
            "file":  "embed/mozilla/EphyBrowser.cpp",
            "function":  "EphyBrowser::SetZoom"
        }
    }
]

vanir_signatures_modified

"2026-09-25T08:07:29Z"