Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9jhw-8cjq-cxc8

Опубликовано: 22 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via performance.getEntries(). This vulnerability affects Thunderbird < 102.4, Firefox ESR < 102.4, and Firefox < 106.

A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via performance.getEntries(). This vulnerability affects Thunderbird < 102.4, Firefox ESR < 102.4, and Firefox < 106.

EPSS

Процентиль: 38%
0.00163
Низкий

8.1 High

CVSS3

Дефекты

CWE-346

Связанные уязвимости

CVSS3: 8.1
ubuntu
больше 2 лет назад

A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via `performance.getEntries()`. This vulnerability affects Firefox < 106, Firefox ESR < 102.4, and Thunderbird < 102.4.

CVSS3: 7.5
redhat
больше 2 лет назад

A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via `performance.getEntries()`. This vulnerability affects Firefox < 106, Firefox ESR < 102.4, and Thunderbird < 102.4.

CVSS3: 8.1
nvd
больше 2 лет назад

A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via `performance.getEntries()`. This vulnerability affects Firefox < 106, Firefox ESR < 102.4, and Thunderbird < 102.4.

CVSS3: 8.1
debian
больше 2 лет назад

A same-origin policy violation could have allowed the theft of cross-o ...

CVSS3: 7.5
fstec
больше 2 лет назад

Уязвимость метода performance.getEntries() браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю обойти ограничения безопасности и получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 38%
0.00163
Низкий

8.1 High

CVSS3

Дефекты

CWE-346