Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-57xv-4vp5-7v49

Опубликовано: 01 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

After selecting a malicious Windows .url shortcut from the local filesystem, an unexpected file could be uploaded.
This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 137 and Thunderbird < 137.

After selecting a malicious Windows .url shortcut from the local filesystem, an unexpected file could be uploaded.
This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 137 and Thunderbird < 137.

EPSS

Процентиль: 3%
0.00019
Низкий

7.7 High

CVSS3

Дефекты

CWE-73

Связанные уязвимости

CVSS3: 7.7
ubuntu
4 месяца назад

After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 137 and Thunderbird < 137.

CVSS3: 7.7
nvd
4 месяца назад

After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 137 and Thunderbird < 137.

CVSS3: 7.7
debian
4 месяца назад

After selecting a malicious Windows `.url` shortcut from the local fil ...

EPSS

Процентиль: 3%
0.00019
Низкий

7.7 High

CVSS3

Дефекты

CWE-73