CVE-2020-8910
CVE-2020-8910 · Auth Bypass in Google's Closure-Library
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker to send malicious URLs to be parsed by the library and return the wrong authority. Mitigation: update your library to version v20200315.
CVSS 6.5 · Medium · EPSS 0.5% · Fix available
- Published
- Updated
Affected products and versions
closure-library
- Versions
- ≥ v20200224, ≤ v20200224: Affected (custom)
No fix published
google-closure-library npm
- Affected ranges
- SEMVER: < 20200315.0.0
Update to 20200315.0.0
qtwebengine-opensource-src Ubuntu:Pro:18.04:LTS
- Versions
- 5.9.1+dfsg-4
- 5.9.1+dfsg-4ubuntu1
- 5.9.2+dfsg-2ubuntu1
- 5.9.3+dfsg-0ubuntu1
- 5.9.4+dfsg-0ubuntu1
- 5.9.5+dfsg-0ubuntu2
- 5.9.5+dfsg-0ubuntu2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:20.04:LTS
- Versions
- 5.12.4+dfsg-1ubuntu1
- 5.12.4+dfsg-1ubuntu3
- 5.12.5+dfsg-3ubuntu1
- 5.12.5+dfsg-6ubuntu2
- 5.12.5+dfsg-7
- 5.12.5+dfsg-7build1
- 5.12.8+dfsg-0ubuntu1
- 5.12.8+dfsg-0ubuntu1.1
- 5.12.8+dfsg-0ubuntu1.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:22.04:LTS
- Versions
- 5.15.6+dfsg-1
- 5.15.6+dfsg-2
- 5.15.7+dfsg-2
- 5.15.8+dfsg-1
- 5.15.8+dfsg-1build1
- 5.15.8+dfsg-1build2
- 5.15.8+dfsg-2
- 5.15.9+dfsg-1
- 5.15.9+dfsg-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:24.04:LTS
- Versions
- 5.15.15+dfsg-2
- 5.15.15+dfsg-2build2
- 5.15.15+dfsg-2ubuntu1
- 5.15.16+dfsg-1
- 5.15.16+dfsg-1ubuntu2
- 5.15.16+dfsg-1ubuntu4
- 5.15.16+dfsg-3
- 5.15.16+dfsg-3ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:25.10
- Versions
- 5.15.18+dfsg-2
- 5.15.18+dfsg-2build1
- 5.15.19+dfsg-1
- 5.15.19+dfsg2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:26.10
- Versions
- 5.15.19+dfsg2-4
- 5.15.19+dfsg2-6
- 5.15.19+dfsg2-7
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:26.04:LTS
- Versions
- 5.15.19+dfsg2-1
- 5.15.19+dfsg2-1build1
- 5.15.19+dfsg2-2
- 5.15.19+dfsg2-3
- 5.15.19+dfsg2-4
- 5.15.19+dfsg2-4ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published