Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3q42-qm7m-gp8c

Опубликовано: 02 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A background script invoking requestFullscreen and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

A background script invoking requestFullscreen and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

EPSS

Процентиль: 28%
0.00095
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-1021

Связанные уязвимости

CVSS3: 5.4
ubuntu
около 2 лет назад

A background script invoking <code>requestFullscreen</code> and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

CVSS3: 7.5
redhat
больше 2 лет назад

A background script invoking <code>requestFullscreen</code> and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

CVSS3: 5.4
nvd
около 2 лет назад

A background script invoking <code>requestFullscreen</code> and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

CVSS3: 5.4
debian
около 2 лет назад

A background script invoking <code>requestFullscreen</code> and then b ...

CVSS3: 7.5
fstec
больше 2 лет назад

Уязвимость браузеров Mozilla Firefox, Mozilla Firefox ESR, почтового клиента Mozilla Thunderbird, связанная с ошибками представления информации пользовательским интерфейсом, позволяющая нарушителю принудительно перевести браузер в полноэкранный режим

EPSS

Процентиль: 28%
0.00095
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-1021