Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-59p4-f6m8-9792

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and write access to the local file system. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53.

A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and write access to the local file system. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53.

EPSS

Процентиль: 84%
0.02265
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 7 лет назад

A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and write access to the local file system. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53.

CVSS3: 9.8
redhat
больше 8 лет назад

A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and write access to the local file system. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53.

CVSS3: 9.8
nvd
около 7 лет назад

A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and write access to the local file system. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53.

CVSS3: 9.8
debian
около 7 лет назад

A mechanism to bypass file system access protections in the sandbox us ...

oracle-oval
больше 8 лет назад

ELSA-2017-1106: firefox security update (CRITICAL)

EPSS

Процентиль: 84%
0.02265
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-732