Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hc6r-wpfc-q7m8

Опубликовано: 01 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.

A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.

EPSS

Процентиль: 46%
0.00235
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-346

Связанные уязвимости

CVSS3: 9.8
ubuntu
10 месяцев назад

A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.

CVSS3: 7.6
redhat
10 месяцев назад

A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.

CVSS3: 9.8
nvd
10 месяцев назад

A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.

CVSS3: 9.8
debian
10 месяцев назад

A compromised content process could have allowed for the arbitrary loa ...

CVSS3: 9.8
fstec
10 месяцев назад

Уязвимость механизма CORS браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю обойти ограничения безопасности

EPSS

Процентиль: 46%
0.00235
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-346