Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-43h2-r954-f6w6

Опубликовано: 26 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.6

Описание

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability affects Firefox < 140.

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability affects Firefox < 140.

EPSS

Процентиль: 21%
0.00287
Низкий

8.6 High

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 8.6
ubuntu
около 1 года назад

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability was fixed in Firefox 140 and Thunderbird 140.

CVSS3: 3.4
redhat
около 1 года назад

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability was fixed in Firefox 140 and Thunderbird 140.

CVSS3: 8.6
nvd
около 1 года назад

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability was fixed in Firefox 140 and Thunderbird 140.

CVSS3: 8.6
debian
около 1 года назад

When Multi-Account Containers was enabled, DNS requests could have byp ...

CVSS3: 8.6
fstec
около 1 года назад

Уязвимость функции Multi-Account Container браузера Mozilla Firefox, позволяющая нарушителю обойти существующие ограничения безопасности прокси-сервера SOCKS и раскрыть защищаемую информацию

EPSS

Процентиль: 21%
0.00287
Низкий

8.6 High

CVSS3

Дефекты

CWE-200