Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3cvc-f83h-vhvc

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

An audio capture session can started under an incorrect origin from the site making the capture request. Users are still prompted to allow the request but the prompt can display the wrong origin, leading to user confusion about which site is making the request to capture an audio stream. This vulnerability affects Firefox < 58.

An audio capture session can started under an incorrect origin from the site making the capture request. Users are still prompted to allow the request but the prompt can display the wrong origin, leading to user confusion about which site is making the request to capture an audio stream. This vulnerability affects Firefox < 58.

EPSS

Процентиль: 49%
0.00604
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-346

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 8 лет назад

An audio capture session can started under an incorrect origin from the site making the capture request. Users are still prompted to allow the request but the prompt can display the wrong origin, leading to user confusion about which site is making the request to capture an audio stream. This vulnerability affects Firefox < 58.

CVSS3: 5.3
nvd
больше 8 лет назад

An audio capture session can started under an incorrect origin from the site making the capture request. Users are still prompted to allow the request but the prompt can display the wrong origin, leading to user confusion about which site is making the request to capture an audio stream. This vulnerability affects Firefox < 58.

CVSS3: 5.3
debian
больше 8 лет назад

An audio capture session can started under an incorrect origin from th ...

CVSS3: 5.3
fstec
около 9 лет назад

Уязвимость браузера Mozilla Firefox, связанная с недостатком в механизме подтверждения источника, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 9.8
altlinux
больше 8 лет назад

ALT-PU-2018-1178: package `firefox` update to version 58.0.2-alt1

EPSS

Процентиль: 49%
0.00604
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-346