Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2qcf-439j-7273

Опубликовано: 19 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately privileged principal. In certain circumstances it might have been possible to cause a document to be loaded with a higher privileged principal than intended. This vulnerability affects Firefox < 113.

Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately privileged principal. In certain circumstances it might have been possible to cause a document to be loaded with a higher privileged principal than intended. This vulnerability affects Firefox < 113.

EPSS

Процентиль: 40%
0.0018
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 2 лет назад

Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately privileged principal. In certain circumstances it might have been possible to cause a document to be loaded with a higher privileged principal than intended. This vulnerability affects Firefox < 113.

CVSS3: 6.5
nvd
больше 2 лет назад

Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately privileged principal. In certain circumstances it might have been possible to cause a document to be loaded with a higher privileged principal than intended. This vulnerability affects Firefox < 113.

CVSS3: 6.5
debian
больше 2 лет назад

Documents were incorrectly assuming an ordering of principal objects w ...

CVSS3: 6.3
fstec
больше 2 лет назад

Уязвимость браузеров Firefox и Firefox ESR, связанная с недостатками разграничения доступа к некоторым функциям, позволяющая нарушителю вызвать загрузку документа с более высоким уровнем привилегий

EPSS

Процентиль: 40%
0.0018
Низкий

6.5 Medium

CVSS3