Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gg39-4c5c-pfx2

Опубликовано: 04 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability affects Firefox < 135 and Thunderbird < 135.

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability affects Firefox < 135 and Thunderbird < 135.

EPSS

Процентиль: 28%
0.00352
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-1021

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 1 года назад

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.

CVSS3: 5.4
redhat
больше 1 года назад

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.

CVSS3: 4.3
nvd
больше 1 года назад

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.

CVSS3: 4.3
debian
больше 1 года назад

The z-order of the browser windows could be manipulated to hide the fu ...

CVSS3: 4.3
fstec
больше 1 года назад

Уязвимость веб-браузера Firefox и почтового клиента Thunderbird, связанная с некорректным ограничением визуализируемых слоев пользовательского интерфейса, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 28%
0.00352
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-1021