Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-454w-5cf7-2xqx

Опубликовано: 22 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificate error. On Firefox for Android, the user was presented with the option to bypass the error; this could only have been done by the user explicitly.
This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 102.

When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificate error. On Firefox for Android, the user was presented with the option to bypass the error; this could only have been done by the user explicitly.
This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 102.

EPSS

Процентиль: 19%
0.00062
Низкий

8.1 High

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 3 лет назад

When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificate error. On Firefox for Android, the user was presented with the option to bypass the error; this could only have been done by the user explicitly. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 102.

CVSS3: 8.1
nvd
около 3 лет назад

When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificate error. On Firefox for Android, the user was presented with the option to bypass the error; this could only have been done by the user explicitly. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 102.

CVSS3: 8.1
debian
около 3 лет назад

When a TLS Certificate error occurs on a domain protected by the HSTS ...

suse-cvrf
больше 3 лет назад

Security update for MozillaFirefox

suse-cvrf
больше 3 лет назад

Security update for MozillaFirefox

EPSS

Процентиль: 19%
0.00062
Низкий

8.1 High

CVSS3

Дефекты

CWE-295