Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7w2r-8gq9-28xx

Опубликовано: 09 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 95.

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 95.

EPSS

Процентиль: 41%
0.0051
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
ubuntu
больше 4 лет назад

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 95.

CVSS3: 6.1
nvd
больше 4 лет назад

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 95.

CVSS3: 6.1
debian
больше 4 лет назад

When receiving a URL through a SEND intent, Firefox would have searche ...

EPSS

Процентиль: 41%
0.0051
Низкий

Дефекты

CWE-79