Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-457f-c77p-7wc3

Опубликовано: 02 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to connections to restricted origins from inside WebWorkers. This vulnerability affects Firefox < 109, Thunderbird < 102.7, and Firefox ESR < 102.7.

A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to connections to restricted origins from inside WebWorkers. This vulnerability affects Firefox < 109, Thunderbird < 102.7, and Firefox ESR < 102.7.

EPSS

Процентиль: 33%
0.00125
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-754

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 2 лет назад

A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to connections to restricted origins from inside WebWorkers. This vulnerability affects Firefox < 109, Thunderbird < 102.7, and Firefox ESR < 102.7.

CVSS3: 6.1
redhat
больше 2 лет назад

A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to connections to restricted origins from inside WebWorkers. This vulnerability affects Firefox < 109, Thunderbird < 102.7, and Firefox ESR < 102.7.

CVSS3: 6.5
nvd
около 2 лет назад

A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to connections to restricted origins from inside WebWorkers. This vulnerability affects Firefox < 109, Thunderbird < 102.7, and Firefox ESR < 102.7.

CVSS3: 6.5
debian
около 2 лет назад

A mishandled security check when creating a WebSocket in a WebWorker c ...

CVSS3: 6.5
fstec
больше 2 лет назад

Уязвимость веб-браузеров Firefox, Firefox ESR, почтового клиента Thunderbird, связанная с недостаточной проверкой необычных или исключительных состояний, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 33%
0.00125
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-754