Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g4xj-2594-cc4j

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability affects Firefox < 83.

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability affects Firefox < 83.

EPSS

Процентиль: 58%
0.0085
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 6 лет назад

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability affects Firefox < 83.

CVSS3: 6.5
nvd
почти 6 лет назад

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability affects Firefox < 83.

CVSS3: 6.5
debian
почти 6 лет назад

When listening for page changes with a Mutation Observer, a malicious ...

CVSS3: 9.6
altlinux
почти 6 лет назад

ALT-PU-2020-3384: package `firefox` update to version 83.0-alt1

CVSS3: 9.8
altlinux
около 5 лет назад

ALT-PU-2021-2725: package `firefox-esr` update to version 91.0.1-alt1

EPSS

Процентиль: 58%
0.0085
Низкий