Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9qx9-m59p-96gr

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Some Arabic and Indic vowel marker characters can be combined with Latin characters in a domain name to eclipse the non-Latin character with some font sets on the addressbar. The non-Latin character will not be visible to most viewers. This allows for domain spoofing attacks because these combined domain names do not display as punycode. This vulnerability affects Firefox < 57.

Some Arabic and Indic vowel marker characters can be combined with Latin characters in a domain name to eclipse the non-Latin character with some font sets on the addressbar. The non-Latin character will not be visible to most viewers. This allows for domain spoofing attacks because these combined domain names do not display as punycode. This vulnerability affects Firefox < 57.

EPSS

Процентиль: 77%
0.01072
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 7 лет назад

Some Arabic and Indic vowel marker characters can be combined with Latin characters in a domain name to eclipse the non-Latin character with some font sets on the addressbar. The non-Latin character will not be visible to most viewers. This allows for domain spoofing attacks because these combined domain names do not display as punycode. This vulnerability affects Firefox < 57.

CVSS3: 5.3
nvd
больше 7 лет назад

Some Arabic and Indic vowel marker characters can be combined with Latin characters in a domain name to eclipse the non-Latin character with some font sets on the addressbar. The non-Latin character will not be visible to most viewers. This allows for domain spoofing attacks because these combined domain names do not display as punycode. This vulnerability affects Firefox < 57.

CVSS3: 5.3
debian
больше 7 лет назад

Some Arabic and Indic vowel marker characters can be combined with Lat ...

CVSS3: 5.3
fstec
больше 8 лет назад

Уязвимость браузера Mozilla Firefox, связанная с недостатком механизма проверки вводимых данных в адресной строке, позволяющая нарушителю проводить спуфинг-атаки

EPSS

Процентиль: 77%
0.01072
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-20