Threats tagged 'ghsa-rgq4-6fxx-v9rg'

A race condition vulnerability in the Epiphany browser allows a malicious website to bypass the TLS/SSL certificate warning page. This occurs because the browser registers a script message handler for TLS errors immediately before loading the error page, creating a brief window where an attacker can exploit predictable page IDs to approve certificate exceptions without user interaction. This flaw enables man-in-the-middle or site spoofing attacks until the browser is restarted.