Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-frfp-c23m-c888

Опубликовано: 26 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the .download file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability affects Firefox < 140.

If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the .download file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability affects Firefox < 140.

EPSS

Процентиль: 21%
0.00066
Низкий

8.1 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 1 месяца назад

If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.download` file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability affects Firefox < 140 and Thunderbird < 140.

CVSS3: 3.4
redhat
около 1 месяца назад

If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.download` file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability affects Firefox < 140 and Thunderbird < 140.

CVSS3: 8.1
nvd
около 1 месяца назад

If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.download` file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability affects Firefox < 140 and Thunderbird < 140.

CVSS3: 8.1
debian
около 1 месяца назад

If a user saved a response from the Network tab in Devtools using the ...

CVSS3: 8.1
fstec
около 1 месяца назад

Уязвимость компонента File Extension Handler браузера Mozilla Firefox, позволяющая нарушителю загрузить произвольный файл

EPSS

Процентиль: 21%
0.00066
Низкий

8.1 High

CVSS3

Дефекты

CWE-434