Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-78h4-7j7j-4p28

Опубликовано: 26 мая 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link preview UI surfaces. A crafted RTL hostname could visually reorder portions of the displayed domain, causing attacker-controlled sites to appear as trusted origins. This vulnerability was fixed in Firefox for iOS 151.1.

Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link preview UI surfaces. A crafted RTL hostname could visually reorder portions of the displayed domain, causing attacker-controlled sites to appear as trusted origins. This vulnerability was fixed in Firefox for iOS 151.1.

EPSS

Процентиль: 10%
0.00199
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-451

Связанные уязвимости

CVSS3: 5.4
nvd
2 месяца назад

Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link preview UI surfaces. A crafted RTL hostname could visually reorder portions of the displayed domain, causing attacker-controlled sites to appear as trusted origins. This vulnerability was fixed in Firefox for iOS 151.1.

CVSS3: 4.3
fstec
2 месяца назад

Уязвимость интерфейса предварительного просмотра ссылок браузера Mozilla Firefox, позволяющая нарушителю проводить фишинг-атаки

EPSS

Процентиль: 10%
0.00199
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-451