Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5p65-3pv7-7gq2

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A unicode RTL order character in the downloaded file name can be used to change the file's name during the download UI flow to change the file extension. This vulnerability affects Firefox for iOS < 28.

A unicode RTL order character in the downloaded file name can be used to change the file's name during the download UI flow to change the file extension. This vulnerability affects Firefox for iOS < 28.

EPSS

Процентиль: 48%
0.00582
Низкий

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 6 лет назад

A unicode RTL order character in the downloaded file name can be used to change the file's name during the download UI flow to change the file extension. This vulnerability affects Firefox for iOS < 28.

CVSS3: 4.3
nvd
около 6 лет назад

A unicode RTL order character in the downloaded file name can be used to change the file's name during the download UI flow to change the file extension. This vulnerability affects Firefox for iOS < 28.

CVSS3: 4.3
debian
около 6 лет назад

A unicode RTL order character in the downloaded file name can be used ...

CVSS3: 9.8
altlinux
больше 12 лет назад

ALT-PU-2014-1407: package `firefox` update to version 28.0-alt1

EPSS

Процентиль: 48%
0.00582
Низкий

Дефекты

CWE-20