Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3fxj-qpxv-j6qj

Опубликовано: 11 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulnerability affects Firefox < 127 and Firefox ESR < 115.12.

By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulnerability affects Firefox < 127 and Firefox ESR < 115.12.

EPSS

Процентиль: 78%
0.01152
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-203

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 1 года назад

By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

CVSS3: 6.1
redhat
около 1 года назад

By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

CVSS3: 4.3
nvd
около 1 года назад

By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

CVSS3: 4.3
debian
около 1 года назад

By monitoring the time certain operations take, an attacker could have ...

CVSS3: 6.1
fstec
около 1 года назад

Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с использованием скрытых побочных каналов, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 78%
0.01152
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-203