Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-frfp-c23m-c888

Опубликовано: 26 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the .download file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability affects Firefox < 140.

If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the .download file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability affects Firefox < 140.

EPSS

Процентиль: 30%
0.00372
Низкий

8.1 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 1 года назад

If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.download` file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability was fixed in Firefox 140 and Thunderbird 140.

CVSS3: 3.4
redhat
около 1 года назад

If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.download` file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability was fixed in Firefox 140 and Thunderbird 140.

CVSS3: 8.1
nvd
около 1 года назад

If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.download` file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability was fixed in Firefox 140 and Thunderbird 140.

CVSS3: 8.1
debian
около 1 года назад

If a user saved a response from the Network tab in Devtools using the ...

CVSS3: 8.1
fstec
около 1 года назад

Уязвимость компонента File Extension Handler браузера Mozilla Firefox, позволяющая нарушителю загрузить произвольный файл

EPSS

Процентиль: 30%
0.00372
Низкий

8.1 High

CVSS3

Дефекты

CWE-434