Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m543-phjx-rgwv

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown origin" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 66.

If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown origin" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 66.

EPSS

Процентиль: 26%
0.00092
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-346

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 7 лет назад

If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown origin" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 66.

CVSS3: 5.3
nvd
почти 7 лет назад

If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown origin" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 66.

CVSS3: 5.3
debian
почти 7 лет назад

If WebRTC permission is requested from documents with data: or blob: U ...

CVSS3: 5.3
fstec
почти 7 лет назад

Уязвимость расширения WebRTC браузера Firefox, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 26%
0.00092
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-346