Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hj6m-j4xw-c8m8

Опубликовано: 22 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox < 103.

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox < 103.

EPSS

Процентиль: 27%
0.00339
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 6.1
ubuntu
почти 4 года назад

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox < 103.

CVSS3: 6.1
nvd
почти 4 года назад

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox < 103.

CVSS3: 6.1
debian
почти 4 года назад

When using the Performance API, an attacker was able to notice subtle ...

CVSS3: 6.1
fstec
больше 4 лет назад

Уязвимость веб-браузера Firefox, связанная с недостаточной защитой служебных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 10
altlinux
около 3 лет назад

ALT-PU-2023-5754: package `firefox-esr` update to version 115.2.1-alt1

EPSS

Процентиль: 27%
0.00339
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601