Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5h8g-78mr-f4g5

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allows for the possibility of an installed malicious application or tools with write access to the file system to replace files used by Firefox with their own versions. This vulnerability affects Firefox < 51.0.3.

The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allows for the possibility of an installed malicious application or tools with write access to the file system to replace files used by Firefox with their own versions. This vulnerability affects Firefox < 51.0.3.

EPSS

Процентиль: 67%
0.00527
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-829

Связанные уязвимости

CVSS3: 9.8
nvd
больше 7 лет назад

The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allows for the possibility of an installed malicious application or tools with write access to the file system to replace files used by Firefox with their own versions. This vulnerability affects Firefox < 51.0.3.

CVSS3: 9.8
debian
больше 7 лет назад

The cache directory on the local file system is set to be world writab ...

EPSS

Процентиль: 67%
0.00527
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-829