Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-272h-q2v7-f686

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 89.

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 89.

EPSS

Процентиль: 53%
0.00302
Низкий

Дефекты

CWE-610

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 4 лет назад

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 89.

CVSS3: 5.3
nvd
около 4 лет назад

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 89.

CVSS3: 5.3
debian
около 4 лет назад

A malicious website that causes an HTTP Authentication dialog to be sp ...

CVSS3: 5.3
fstec
около 4 лет назад

Уязвимость браузера Firefox for Android, связанная с ошибками при обработке гипертекстовых ссылок, позволяющая нарушителю получить доступ к конфиденциальным данным

EPSS

Процентиль: 53%
0.00302
Низкий

Дефекты

CWE-610