Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7f7j-qhc3-4fvp

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings (but not access the previous profile). Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 68.11.

Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings (but not access the previous profile). Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 68.11.

EPSS

Процентиль: 48%
0.00248
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 5 лет назад

Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings (but not access the previous profile). *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.11.

CVSS3: 6.1
redhat
больше 5 лет назад

Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings (but not access the previous profile). *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.11.

CVSS3: 5.5
nvd
больше 5 лет назад

Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings (but not access the previous profile). *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.11.

CVSS3: 5.5
debian
больше 5 лет назад

Given an installed malicious file picker application, an attacker was ...

CVSS3: 5.5
fstec
больше 5 лет назад

Уязвимость браузера Firefox ESR для операционных систем Android, связанная с небезопасным управлением привилегиями, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

EPSS

Процентиль: 48%
0.00248
Низкий