How severe is CVE-2020-15174?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.5 out of 10.

What type of vulnerability is CVE-2020-15174?

This is classified as CWE-20, which is a common weakness in software security.

CVE-2020-15174

HIGH Year: 2020

CVSS v3 Score

7.5

High

CVSS v2 Score

5.8

Medium

Weakness Type

CWE-20

View all →

Vulnerability Description

In Electron before versions 11.0.0-beta.1, 10.0.1, 9.3.0 or 8.5.1 the `will-navigate` event that apps use to prevent navigations to unexpected destinations as per our security recommendations can be bypassed when a sub-frame performs a top-frame navigation across sites. The issue is patched in versions 11.0.0-beta.1, 10.0.1, 9.3.0 or 8.5.1 As a workaround sandbox all your iframes using the sandbox attribute. This will prevent them creating top-frame navigations and is good practice anyway.

CVE-2000-0258

HIGH

CVSS:7.5(High)

IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Characters" Vulnerability.

CWE-202000

CVE-2008-2169

HIGH

CVSS:7.5(High)

Unspecified vulnerability in Avici routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue t...

CWE-202008

CVE-2008-2170

HIGH

CVSS:7.5(High)

Unspecified vulnerability in Century routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue...

CWE-202008

CVE-2008-2173

HIGH

CVSS:7.5(High)

Unspecified vulnerability in Yamaha routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue ...

CWE-202008