Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-23956

Опубликовано: 26 фев. 2021
Источник: debian
EPSS Низкий

Описание

An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory. This was addressed by adding a new prompt. This vulnerability affects Firefox < 85.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed85.0-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2021-03/#CVE-2021-23956

EPSS

Процентиль: 52%
0.00284
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 4 лет назад

An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory. This was addressed by adding a new prompt. This vulnerability affects Firefox < 85.

CVSS3: 6.5
nvd
больше 4 лет назад

An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory. This was addressed by adding a new prompt. This vulnerability affects Firefox < 85.

github
около 3 лет назад

An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory. This was addressed by adding a new prompt. This vulnerability affects Firefox < 85.

CVSS3: 6.5
fstec
больше 4 лет назад

Уязвимость браузера Mozilla Firefox, связанная с ошибками представления информации пользовательским интерфейсом, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 52%
0.00284
Низкий