Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f4pj-f2qw-57cr

Опубликовано: 29 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.1

Описание

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 138 and Thunderbird < 138.

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 138 and Thunderbird < 138.

EPSS

Процентиль: 3%
0.00018
Низкий

5.1 Medium

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 5.1
ubuntu
7 месяцев назад

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 138 and Thunderbird < 138.

CVSS3: 6.3
redhat
7 месяцев назад

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 138 and Thunderbird < 138.

CVSS3: 5.1
nvd
7 месяцев назад

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 138 and Thunderbird < 138.

CVSS3: 5.1
debian
7 месяцев назад

Due to insufficient escaping of special characters in the "copy as cUR ...

CVSS3: 5.1
fstec
7 месяцев назад

Уязвимость функции Copy as cURL браузера Mozilla Firefox и почтового клиента Thunderbird, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 3%
0.00018
Низкий

5.1 Medium

CVSS3

Дефекты

CWE-77