Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mv6j-qcrj-q856

Опубликовано: 21 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicking to grant an HTTPS-only exception if they could get the user to participate in a clicking game. This vulnerability affects Firefox < 120.

If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicking to grant an HTTPS-only exception if they could get the user to participate in a clicking game. This vulnerability affects Firefox < 120.

EPSS

Процентиль: 35%
0.0018
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-1021

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 2 лет назад

If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicking to grant an HTTPS-only exception if they could get the user to participate in a clicking game. This vulnerability affects Firefox < 120.

CVSS3: 6.5
nvd
около 2 лет назад

If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicking to grant an HTTPS-only exception if they could get the user to participate in a clicking game. This vulnerability affects Firefox < 120.

CVSS3: 6.5
debian
около 2 лет назад

If an attacker needed a user to load an insecure http: page and knew t ...

CVSS3: 4.3
fstec
около 2 лет назад

Уязвимость режима HTTPS-only Mode браузера Firefox, позволяющая нарушителю провести атаку типа clickjacking («захват клика»)

EPSS

Процентиль: 35%
0.0018
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-1021