Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q64v-p3vv-m993

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

EPSS

Процентиль: 61%
0.00412
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.1
ubuntu
больше 6 лет назад

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

CVSS3: 5.8
redhat
больше 6 лет назад

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

CVSS3: 6.1
nvd
больше 6 лет назад

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

CVSS3: 6.1
debian
больше 6 лет назад

Application permissions give additional remote troubleshooting permiss ...

CVSS3: 6.1
fstec
больше 6 лет назад

Уязвимость браузера Firefox, связанная с ошибками в настройках разрешений, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность

EPSS

Процентиль: 61%
0.00412
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-863