Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hj65-9wfc-jmf4

Опубликовано: 17 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site. This bug only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox for Android < 130.0.1.

Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site. This bug only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox for Android < 130.0.1.

EPSS

Процентиль: 33%
0.00125
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 6.1
nvd
10 месяцев назад

Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 130.0.1.

CVSS3: 6.1
debian
10 месяцев назад

Under certain conditions, an attacker with the ability to redirect use ...

CVSS3: 6.1
fstec
10 месяцев назад

Уязвимость браузера Mozilla Firefox операционных систем Android, связанная с использованием открытой переадресации, позволяющая нарушителю перенаправить пользователя на произвольный URL-адрес

EPSS

Процентиль: 33%
0.00125
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601