Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3v83-x3vq-3mmv

Опубликовано: 22 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.

When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.

EPSS

Процентиль: 23%
0.00077
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 3 года назад

When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.

CVSS3: 7.5
redhat
больше 3 лет назад

When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.

CVSS3: 6.5
nvd
почти 3 года назад

When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.

CVSS3: 6.5
debian
почти 3 года назад

When exiting fullscreen mode, an iframe could have confused the browse ...

CVSS3: 7.5
fstec
больше 3 лет назад

Уязвимость реализации полноэкранного режима браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю проводить спуфинг-атаки

EPSS

Процентиль: 23%
0.00077
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-290