Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4c8g-9w4h-h6xm

Опубликовано: 11 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

If a specific sequence of actions is performed when opening a new tab, the triggering principal associated with the new tab may have been incorrect. The triggering principal is used to calculate many values, including the Referer and Sec-* headers, meaning there is the potential for incorrect security checks within the browser in addition to incorrect or misleading information sent to remote websites. This bug only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox < 127.

If a specific sequence of actions is performed when opening a new tab, the triggering principal associated with the new tab may have been incorrect. The triggering principal is used to calculate many values, including the Referer and Sec-* headers, meaning there is the potential for incorrect security checks within the browser in addition to incorrect or misleading information sent to remote websites. This bug only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox < 127.

EPSS

Процентиль: 36%
0.00411
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 2 лет назад

If a specific sequence of actions is performed when opening a new tab, the triggering principal associated with the new tab may have been incorrect. The triggering principal is used to calculate many values, including the `Referer` and `Sec-*` headers, meaning there is the potential for incorrect security checks within the browser in addition to incorrect or misleading information sent to remote websites. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 127.

CVSS3: 5.3
nvd
больше 2 лет назад

If a specific sequence of actions is performed when opening a new tab, the triggering principal associated with the new tab may have been incorrect. The triggering principal is used to calculate many values, including the `Referer` and `Sec-*` headers, meaning there is the potential for incorrect security checks within the browser in addition to incorrect or misleading information sent to remote websites. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 127.

CVSS3: 5.3
debian
больше 2 лет назад

If a specific sequence of actions is performed when opening a new tab, ...

CVSS3: 4.3
fstec
больше 2 лет назад

Уязвимость браузера Mozilla Firefox for Android, связанная с недостатками разграничения доступа, позволяющая нарушителю обойти ограничения безопасности и оказать влияние на целостность защищаемой информации

CVSS3: 9.8
altlinux
около 2 лет назад

ALT-PU-2024-13895: package `firefox` update to version 131.0.2-alt1

EPSS

Процентиль: 36%
0.00411
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-284