Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q64v-p3vv-m993

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

EPSS

Процентиль: 64%
0.01126
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.1
ubuntu
около 7 лет назад

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

CVSS3: 5.8
redhat
около 7 лет назад

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

CVSS3: 6.1
nvd
около 7 лет назад

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

CVSS3: 6.1
debian
около 7 лет назад

Application permissions give additional remote troubleshooting permiss ...

CVSS3: 6.1
fstec
около 7 лет назад

Уязвимость браузера Firefox, связанная с ошибками в настройках разрешений, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность

EPSS

Процентиль: 64%
0.01126
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-863