CVE-2019-6251

CVE-2019-6251 is a high-severity address bar spoofing vulnerability affecting WebKitGTK and WPE WebKit versions prior to 2.24.1, impacting products from vendors like Canonical, Fedora, and openSUSE. An attacker could exploit this by using specific JavaScript redirections to display malicious web content under the guise of a trusted URI, potentially leading to information disclosure or integrity compromise. With a CVSS score of 8.1, this vulnerability is easily exploitable via a network-based attack requiring user interaction. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.