Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-23956

Опубликовано: 26 фев. 2021
Источник: debian

Описание

An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory. This was addressed by adding a new prompt. This vulnerability affects Firefox < 85.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed85.0-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2021-03/#CVE-2021-23956

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 5 лет назад

An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory. This was addressed by adding a new prompt. This vulnerability affects Firefox < 85.

CVSS3: 6.5
nvd
больше 5 лет назад

An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory. This was addressed by adding a new prompt. This vulnerability affects Firefox < 85.

github
больше 4 лет назад

An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory. This was addressed by adding a new prompt. This vulnerability affects Firefox < 85.

CVSS3: 6.5
fstec
почти 6 лет назад

Уязвимость браузера Mozilla Firefox, связанная с ошибками представления информации пользовательским интерфейсом, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 8.8
altlinux
почти 6 лет назад

ALT-PU-2021-1162: package `firefox` update to version 85.0-alt1