Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7j8v-jvv6-m8cg

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode. Combined with spoofing the browser chrome, this could have led to confusing the user about the current origin of the page and credential theft or other attacks. This vulnerability affects Firefox < 74.

After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode. Combined with spoofing the browser chrome, this could have led to confusing the user about the current origin of the page and credential theft or other attacks. This vulnerability affects Firefox < 74.

EPSS

Процентиль: 49%
0.00262
Низкий

Связанные уязвимости

CVSS3: 4.3
ubuntu
почти 6 лет назад

After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode. Combined with spoofing the browser chrome, this could have led to confusing the user about the current origin of the page and credential theft or other attacks. This vulnerability affects Firefox < 74.

CVSS3: 4.3
redhat
почти 6 лет назад

After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode. Combined with spoofing the browser chrome, this could have led to confusing the user about the current origin of the page and credential theft or other attacks. This vulnerability affects Firefox < 74.

CVSS3: 4.3
nvd
почти 6 лет назад

After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode. Combined with spoofing the browser chrome, this could have led to confusing the user about the current origin of the page and credential theft or other attacks. This vulnerability affects Firefox < 74.

CVSS3: 4.3
debian
почти 6 лет назад

After a website had entered fullscreen mode, it could have used a prev ...

EPSS

Процентиль: 49%
0.00262
Низкий