Threats tagged 'ghsa-pv7g-824r-3xmg'

A logic error in Epiphany browser's permission handling causes camera and microphone access to be granted when the user only approves clipboard or website data access permissions. This occurs because the code incorrectly grants audiovisual permissions when handling certain permission types, allowing a malicious site to use getUserMedia without additional prompts after clipboard or website data access is allowed. The vulnerability affects Epiphany versions 45.0 through at least 51.x and requires user interaction to exploit. A fix has been implemented upstream.