Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-45417

Опубликовано: 22 дек. 2022
Источник: debian
EPSS Низкий

Описание

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed107.0-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2022-47/#CVE-2022-45417

EPSS

Процентиль: 38%
0.00436
Низкий

Связанные уязвимости

CVSS3: 4.3
ubuntu
почти 4 года назад

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107.

CVSS3: 4.3
nvd
почти 4 года назад

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107.

msrc
около 1 года назад

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107.

CVSS3: 4.3
github
почти 4 года назад

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107.

CVSS3: 4.3
fstec
около 4 лет назад

Уязвимость службы Service Workers режима приватного просмотра веб-браузера Firefox, связанная с некорректным ограничением визуализируемых слоев пользовательского интерфейса, позволяющая нарушителю получить доступ к конфиденциальным данным

EPSS

Процентиль: 38%
0.00436
Низкий