Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9hjj-28h8-gp86

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to open. This can allow malicious web content to open a locally stored file through "file:" URLs. This vulnerability affects Firefox < 56.

If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to open. This can allow malicious web content to open a locally stored file through "file:" URLs. This vulnerability affects Firefox < 56.

EPSS

Процентиль: 69%
0.01234
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 8 лет назад

If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to open. This can allow malicious web content to open a locally stored file through "file:" URLs. This vulnerability affects Firefox < 56.

CVSS3: 5.3
nvd
больше 8 лет назад

If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to open. This can allow malicious web content to open a locally stored file through "file:" URLs. This vulnerability affects Firefox < 56.

CVSS3: 5.3
debian
больше 8 лет назад

If web content on a page is dragged onto portions of the browser UI, s ...

CVSS3: 5.3
fstec
больше 9 лет назад

Уязвимость браузера Mozilla Firefox, связанная с отсутствием защиты служебных данных, позволяющая нарушителю проводить межсайтовые сценарные атаки

CVSS3: 9.8
altlinux
около 9 лет назад

ALT-PU-2017-2437: package `firefox` update to version 56.0-alt1

EPSS

Процентиль: 69%
0.01234
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200