Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-52cj-9wxr-xfhp

Опубликовано: 25 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox < 119.

A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox < 119.

EPSS

Процентиль: 38%
0.00163
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 2 лет назад

A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox < 119.

CVSS3: 4.3
nvd
около 2 лет назад

A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox < 119.

CVSS3: 4.3
debian
около 2 лет назад

A malicious web site can enter fullscreen mode while simultaneously tr ...

CVSS3: 4.7
fstec
около 2 лет назад

Уязвимость полноэкранного режима браузера Firefox, позволяющая нарушителю проводить спуфинг-атаки

suse-cvrf
около 2 лет назад

Security update for MozillaFirefox

EPSS

Процентиль: 38%
0.00163
Низкий

4.3 Medium

CVSS3