Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9hjj-28h8-gp86

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to open. This can allow malicious web content to open a locally stored file through "file:" URLs. This vulnerability affects Firefox < 56.

If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to open. This can allow malicious web content to open a locally stored file through "file:" URLs. This vulnerability affects Firefox < 56.

EPSS

Процентиль: 50%
0.00272
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 7 лет назад

If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to open. This can allow malicious web content to open a locally stored file through "file:" URLs. This vulnerability affects Firefox < 56.

CVSS3: 5.3
nvd
больше 7 лет назад

If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to open. This can allow malicious web content to open a locally stored file through "file:" URLs. This vulnerability affects Firefox < 56.

CVSS3: 5.3
debian
больше 7 лет назад

If web content on a page is dragged onto portions of the browser UI, s ...

CVSS3: 5.3
fstec
больше 8 лет назад

Уязвимость браузера Mozilla Firefox, связанная с отсутствием защиты служебных данных, позволяющая нарушителю проводить межсайтовые сценарные атаки

EPSS

Процентиль: 50%
0.00272
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200