Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-34r6-q8c8-23mx

Опубликовано: 26 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks. This bug only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox < 140.

When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks. This bug only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox < 140.

EPSS

Процентиль: 6%
0.00027
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 1 месяца назад

When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 140.

CVSS3: 6.1
redhat
около 1 месяца назад

When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 140.

CVSS3: 4.3
nvd
около 1 месяца назад

When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 140.

CVSS3: 4.3
debian
около 1 месяца назад

When a URL was provided in a link querystring parameter, Firefox for A ...

CVSS3: 4.3
fstec
около 1 месяца назад

Уязвимость браузера Mozilla Firefox операционных систем Android, связанная с использованием открытой переадресации, позволяющая нарушителю проводить фишинг-атаки

EPSS

Процентиль: 6%
0.00027
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-601