Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3c9h-j75v-3mr5

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the desired, entered address. To construct a convincing spoof the attacker would have had to guess what the user was typing, perhaps by suggesting it. This vulnerability affects Firefox < 84.

When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the desired, entered address. To construct a convincing spoof the attacker would have had to guess what the user was typing, perhaps by suggesting it. This vulnerability affects Firefox < 84.

EPSS

Процентиль: 54%
0.00726
Низкий

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 6.1
ubuntu
почти 6 лет назад

When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the desired, entered address. To construct a convincing spoof the attacker would have had to guess what the user was typing, perhaps by suggesting it. This vulnerability affects Firefox < 84.

CVSS3: 6.1
nvd
почти 6 лет назад

When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the desired, entered address. To construct a convincing spoof the attacker would have had to guess what the user was typing, perhaps by suggesting it. This vulnerability affects Firefox < 84.

CVSS3: 6.1
debian
почти 6 лет назад

When a user typed a URL in the address bar or the search bar and quick ...

CVSS3: 9.8
altlinux
почти 6 лет назад

ALT-PU-2020-3529: package `firefox` update to version 84.0-alt1

CVSS3: 9.8
altlinux
около 5 лет назад

ALT-PU-2021-2725: package `firefox-esr` update to version 91.0.1-alt1

EPSS

Процентиль: 54%
0.00726
Низкий

Дефекты

CWE-601