Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-57xv-4vp5-7v49

Опубликовано: 01 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

After selecting a malicious Windows .url shortcut from the local filesystem, an unexpected file could be uploaded.
This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 137 and Thunderbird < 137.

After selecting a malicious Windows .url shortcut from the local filesystem, an unexpected file could be uploaded.
This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 137 and Thunderbird < 137.

EPSS

Процентиль: 7%
0.0017
Низкий

7.7 High

CVSS3

Дефекты

CWE-73

Связанные уязвимости

CVSS3: 7.7
ubuntu
больше 1 года назад

After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded. *This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 137 and Thunderbird 137.

CVSS3: 7.7
nvd
больше 1 года назад

After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded. *This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 137 and Thunderbird 137.

CVSS3: 7.7
debian
больше 1 года назад

After selecting a malicious Windows `.url` shortcut from the local fil ...

CVSS3: 8.1
fstec
больше 1 года назад

Уязвимость браузера Mozilla Firefox и почтового клиента Thunderbird, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 7%
0.0017
Низкий

7.7 High

CVSS3

Дефекты

CWE-73