Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-52cj-9wxr-xfhp

Опубликовано: 25 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox < 119.

A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox < 119.

EPSS

Процентиль: 37%
0.00159
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 2 лет назад

A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox < 119.

CVSS3: 4.3
nvd
больше 2 лет назад

A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox < 119.

CVSS3: 4.3
debian
больше 2 лет назад

A malicious web site can enter fullscreen mode while simultaneously tr ...

CVSS3: 4.7
fstec
больше 2 лет назад

Уязвимость полноэкранного режима браузера Firefox, позволяющая нарушителю проводить спуфинг-атаки

suse-cvrf
больше 2 лет назад

Security update for MozillaFirefox

EPSS

Процентиль: 37%
0.00159
Низкий

4.3 Medium

CVSS3