Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-77wh-39r6-7gg9

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

A vulnerability in the notifications Push API where notifications can be sent through service workers by web content without direct user interaction. This could be used to open new tabs in a denial of service (DOS) attack or to display unwanted content from arbitrary URLs to users. This vulnerability affects Firefox < 59.

A vulnerability in the notifications Push API where notifications can be sent through service workers by web content without direct user interaction. This could be used to open new tabs in a denial of service (DOS) attack or to display unwanted content from arbitrary URLs to users. This vulnerability affects Firefox < 59.

EPSS

Процентиль: 77%
0.01071
Низкий

8.2 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.2
ubuntu
больше 7 лет назад

A vulnerability in the notifications Push API where notifications can be sent through service workers by web content without direct user interaction. This could be used to open new tabs in a denial of service (DOS) attack or to display unwanted content from arbitrary URLs to users. This vulnerability affects Firefox < 59.

CVSS3: 8.2
nvd
больше 7 лет назад

A vulnerability in the notifications Push API where notifications can be sent through service workers by web content without direct user interaction. This could be used to open new tabs in a denial of service (DOS) attack or to display unwanted content from arbitrary URLs to users. This vulnerability affects Firefox < 59.

CVSS3: 8.2
debian
больше 7 лет назад

A vulnerability in the notifications Push API where notifications can ...

CVSS3: 8.2
fstec
около 8 лет назад

Уязвимость интерфейса push уведомлений Push API браузера Mozilla Firefox, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании

EPSS

Процентиль: 77%
0.01071
Низкий

8.2 High

CVSS3

Дефекты

CWE-20