Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f4pj-f2qw-57cr

Опубликовано: 29 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.1

Описание

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 138 and Thunderbird < 138.

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 138 and Thunderbird < 138.

EPSS

Процентиль: 5%
0.00025
Низкий

5.1 Medium

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 5.1
ubuntu
около 2 месяцев назад

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 138 and Thunderbird < 138.

CVSS3: 6.3
redhat
около 2 месяцев назад

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 138 and Thunderbird < 138.

CVSS3: 5.1
nvd
около 2 месяцев назад

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 138 and Thunderbird < 138.

CVSS3: 5.1
debian
около 2 месяцев назад

Due to insufficient escaping of special characters in the "copy as cUR ...

CVSS3: 5.1
fstec
около 2 месяцев назад

Уязвимость функции Copy as cURL браузера Mozilla Firefox и почтового клиента Thunderbird, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 5%
0.00025
Низкий

5.1 Medium

CVSS3

Дефекты

CWE-77