Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-284c-r484-8cqh

Опубликовано: 22 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107.

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107.

EPSS

Процентиль: 34%
0.00137
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-1021

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 2 лет назад

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107.

CVSS3: 4.3
nvd
больше 2 лет назад

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107.

CVSS3: 4.3
debian
больше 2 лет назад

Service Workers did not detect Private Browsing Mode correctly in all ...

CVSS3: 4.3
fstec
почти 3 года назад

Уязвимость службы Service Workers режима приватного просмотра веб-браузера Firefox, связанная с некорректным ограничением визуализируемых слоев пользовательского интерфейса, позволяющая нарушителю получить доступ к конфиденциальным данным

EPSS

Процентиль: 34%
0.00137
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-1021