Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gf3r-ccj6-h68v

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by a jar: URL for a favicon resource.

Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by a jar: URL for a favicon resource.

EPSS

Процентиль: 60%
0.00393
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 9 лет назад

Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by a jar: URL for a favicon resource.

CVSS3: 5.6
redhat
больше 9 лет назад

Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by a jar: URL for a favicon resource.

CVSS3: 6.5
nvd
больше 9 лет назад

Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by a jar: URL for a favicon resource.

CVSS3: 6.5
debian
больше 9 лет назад

Mozilla Firefox before 49.0 does not properly restrict the scheme in f ...

suse-cvrf
больше 9 лет назад

Security update for MozillaFirefox, mozilla-nss

EPSS

Процентиль: 60%
0.00393
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-200