Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-845f-27fw-gjw9

Опубликовано: 26 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

Malicious websites may have been able to user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

Malicious websites may have been able to user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

EPSS

Процентиль: 21%
0.00068
Низкий

8.1 High

CVSS3

Дефекты

CWE-1021

Связанные уязвимости

CVSS3: 8.1
ubuntu
7 месяцев назад

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

CVSS3: 5.4
redhat
7 месяцев назад

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

CVSS3: 8.1
nvd
7 месяцев назад

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

CVSS3: 8.1
debian
7 месяцев назад

Malicious websites may have been able to perform user intent confirmat ...

CVSS3: 8.1
fstec
7 месяцев назад

Уязвимость браузера Mozilla Firefox и почтового клиента Thunderbird операционных систем Android, связанная с некорректным ограничением визуализированных слоев пользовательского интерфейса, позволяющая нарушителю выполнить атаку типа tapjacking

EPSS

Процентиль: 21%
0.00068
Низкий

8.1 High

CVSS3

Дефекты

CWE-1021