Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2wfq-mq88-h9xc

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox < 83.

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox < 83.

EPSS

Процентиль: 53%
0.00698
Низкий

Дефекты

CWE-1021

Связанные уязвимости

CVSS3: 6.1
ubuntu
почти 6 лет назад

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox < 83.

CVSS3: 6.1
nvd
почти 6 лет назад

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox < 83.

CVSS3: 6.1
debian
почти 6 лет назад

Cross-origin iframes that contained a login form could have been recog ...

CVSS3: 9.6
altlinux
почти 6 лет назад

ALT-PU-2020-3384: package `firefox` update to version 83.0-alt1

CVSS3: 9.8
altlinux
около 5 лет назад

ALT-PU-2021-2725: package `firefox-esr` update to version 91.0.1-alt1

EPSS

Процентиль: 53%
0.00698
Низкий

Дефекты

CWE-1021