Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3c9h-j75v-3mr5

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the desired, entered address. To construct a convincing spoof the attacker would have had to guess what the user was typing, perhaps by suggesting it. This vulnerability affects Firefox < 84.

When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the desired, entered address. To construct a convincing spoof the attacker would have had to guess what the user was typing, perhaps by suggesting it. This vulnerability affects Firefox < 84.

EPSS

Процентиль: 48%
0.0025
Низкий

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 6.1
ubuntu
около 5 лет назад

When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the desired, entered address. To construct a convincing spoof the attacker would have had to guess what the user was typing, perhaps by suggesting it. This vulnerability affects Firefox < 84.

CVSS3: 6.1
nvd
около 5 лет назад

When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the desired, entered address. To construct a convincing spoof the attacker would have had to guess what the user was typing, perhaps by suggesting it. This vulnerability affects Firefox < 84.

CVSS3: 6.1
debian
около 5 лет назад

When a user typed a URL in the address bar or the search bar and quick ...

EPSS

Процентиль: 48%
0.0025
Низкий

Дефекты

CWE-601