Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m543-phjx-rgwv

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown origin" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 66.

If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown origin" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 66.

EPSS

Процентиль: 38%
0.00457
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-346

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 7 лет назад

If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown origin" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 66.

CVSS3: 5.3
nvd
больше 7 лет назад

If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown origin" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 66.

CVSS3: 5.3
debian
больше 7 лет назад

If WebRTC permission is requested from documents with data: or blob: U ...

CVSS3: 5.3
fstec
больше 7 лет назад

Уязвимость расширения WebRTC браузера Firefox, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 38%
0.00457
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-346