Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gg39-4c5c-pfx2

Опубликовано: 04 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability affects Firefox < 135 and Thunderbird < 135.

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability affects Firefox < 135 and Thunderbird < 135.

EPSS

Процентиль: 31%
0.00116
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-1021

Связанные уязвимости

CVSS3: 4.3
ubuntu
11 месяцев назад

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability affects Firefox < 135 and Thunderbird < 135.

CVSS3: 5.4
redhat
11 месяцев назад

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability affects Firefox < 135 and Thunderbird < 135.

CVSS3: 4.3
nvd
11 месяцев назад

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability affects Firefox < 135 and Thunderbird < 135.

CVSS3: 4.3
debian
11 месяцев назад

The z-order of the browser windows could be manipulated to hide the fu ...

CVSS3: 4.3
fstec
11 месяцев назад

Уязвимость веб-браузера Firefox и почтового клиента Thunderbird, связанная с некорректным ограничением визуализируемых слоев пользовательского интерфейса, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 31%
0.00116
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-1021