Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9jhw-8cjq-cxc8

Опубликовано: 22 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via performance.getEntries(). This vulnerability affects Thunderbird < 102.4, Firefox ESR < 102.4, and Firefox < 106.

A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via performance.getEntries(). This vulnerability affects Thunderbird < 102.4, Firefox ESR < 102.4, and Firefox < 106.

EPSS

Процентиль: 37%
0.00155
Низкий

8.1 High

CVSS3

Дефекты

CWE-346

Связанные уязвимости

CVSS3: 8.1
ubuntu
почти 3 года назад

A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via `performance.getEntries()`. This vulnerability affects Firefox < 106, Firefox ESR < 102.4, and Thunderbird < 102.4.

CVSS3: 7.5
redhat
около 3 лет назад

A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via `performance.getEntries()`. This vulnerability affects Firefox < 106, Firefox ESR < 102.4, and Thunderbird < 102.4.

CVSS3: 8.1
nvd
почти 3 года назад

A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via `performance.getEntries()`. This vulnerability affects Firefox < 106, Firefox ESR < 102.4, and Thunderbird < 102.4.

CVSS3: 8.1
debian
почти 3 года назад

A same-origin policy violation could have allowed the theft of cross-o ...

CVSS3: 7.5
fstec
около 3 лет назад

Уязвимость метода performance.getEntries() браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю обойти ограничения безопасности и получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 37%
0.00155
Низкий

8.1 High

CVSS3

Дефекты

CWE-346