Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-57xv-4vp5-7v49

Опубликовано: 01 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

After selecting a malicious Windows .url shortcut from the local filesystem, an unexpected file could be uploaded.
This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 137 and Thunderbird < 137.

After selecting a malicious Windows .url shortcut from the local filesystem, an unexpected file could be uploaded.
This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 137 and Thunderbird < 137.

EPSS

Процентиль: 2%
0.00016
Низкий

7.7 High

CVSS3

Дефекты

CWE-73

Связанные уязвимости

CVSS3: 7.7
ubuntu
3 месяца назад

After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 137 and Thunderbird < 137.

CVSS3: 7.7
nvd
3 месяца назад

After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 137 and Thunderbird < 137.

CVSS3: 7.7
debian
3 месяца назад

After selecting a malicious Windows `.url` shortcut from the local fil ...

EPSS

Процентиль: 2%
0.00016
Низкий

7.7 High

CVSS3

Дефекты

CWE-73