Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8mxh-558j-w4gm

Опубликовано: 01 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 116.

A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 116.

EPSS

Процентиль: 33%
0.00128
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-59

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 2 года назад

A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 116, Firefox ESR < 115.2, and Thunderbird < 115.2.

CVSS3: 6.1
redhat
почти 2 года назад

A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 116, Firefox ESR < 115.2, and Thunderbird < 115.2.

CVSS3: 6.5
nvd
почти 2 года назад

A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 116, Firefox ESR < 115.2, and Thunderbird < 115.2.

CVSS3: 6.5
debian
почти 2 года назад

A website could have obscured the full screen notification by using a ...

CVSS3: 6.5
fstec
около 2 лет назад

Уязвимость веб-браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с неверным определением символических ссылок перед доступом к файлу, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 33%
0.00128
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-59