Epiphany Insecure External Protocol Invocation Vulnerability Allowing Code Execution

A vulnerability exists in Epiphany versions prior to 48.1 and 47.5, allowing websites to invoke external URL handlers with minimal user interaction or warning. This could be exploited if the handler application has vulnerabilities, potentially leading to code execution on the client's device. The issue arises because the browser does not adequately alert users or restrict this action, misusing trusted UI behavior to create a false sense of security.

Impact

Exploitation of this vulnerability could result in unauthorized code execution on the client's device, executed within the user's context.