Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gg39-4c5c-pfx2

Опубликовано: 04 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability affects Firefox < 135 and Thunderbird < 135.

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability affects Firefox < 135 and Thunderbird < 135.

EPSS

Процентиль: 26%
0.00091
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-1021

Связанные уязвимости

CVSS3: 4.3
ubuntu
9 месяцев назад

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability affects Firefox < 135 and Thunderbird < 135.

CVSS3: 5.4
redhat
9 месяцев назад

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability affects Firefox < 135 and Thunderbird < 135.

CVSS3: 4.3
nvd
9 месяцев назад

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability affects Firefox < 135 and Thunderbird < 135.

CVSS3: 4.3
debian
9 месяцев назад

The z-order of the browser windows could be manipulated to hide the fu ...

CVSS3: 4.3
fstec
9 месяцев назад

Уязвимость веб-браузера Firefox и почтового клиента Thunderbird, связанная с некорректным ограничением визуализируемых слоев пользовательского интерфейса, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 26%
0.00091
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-1021