Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5hfh-rpj4-39xm

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme installation, which allows man-in-the-middle attackers to replace a theme's images and colors by modifying the client-server data stream.

Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme installation, which allows man-in-the-middle attackers to replace a theme's images and colors by modifying the client-server data stream.

EPSS

Процентиль: 44%
0.00219
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 10 лет назад

Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme installation, which allows man-in-the-middle attackers to replace a theme's images and colors by modifying the client-server data stream.

CVSS3: 5.3
nvd
около 10 лет назад

Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme installation, which allows man-in-the-middle attackers to replace a theme's images and colors by modifying the client-server data stream.

CVSS3: 5.3
debian
около 10 лет назад

Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is u ...

EPSS

Процентиль: 44%
0.00219
Низкий

5.3 Medium

CVSS3