Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-845f-27fw-gjw9

Опубликовано: 26 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

Malicious websites may have been able to user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

Malicious websites may have been able to user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

EPSS

Процентиль: 33%
0.00126
Низкий

8.1 High

CVSS3

Дефекты

CWE-1021

Связанные уязвимости

CVSS3: 8.1
ubuntu
12 месяцев назад

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

CVSS3: 5.4
redhat
12 месяцев назад

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

CVSS3: 8.1
nvd
12 месяцев назад

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

CVSS3: 8.1
debian
12 месяцев назад

Malicious websites may have been able to perform user intent confirmat ...

CVSS3: 8.1
fstec
12 месяцев назад

Уязвимость браузера Mozilla Firefox и почтового клиента Thunderbird операционных систем Android, связанная с некорректным ограничением визуализированных слоев пользовательского интерфейса, позволяющая нарушителю выполнить атаку типа tapjacking

EPSS

Процентиль: 33%
0.00126
Низкий

8.1 High

CVSS3

Дефекты

CWE-1021