Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r75w-mj28-6x5x

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by Python instead of being opened as a text file when the Open option was selected upon download. Note: this issue only occurs on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 72.

When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by Python instead of being opened as a text file when the Open option was selected upon download. Note: this issue only occurs on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 72.

EPSS

Процентиль: 64%
0.01046
Низкий

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 7 лет назад

When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by Python instead of being opened as a text file when the Open option was selected upon download. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 72.

CVSS3: 8.8
nvd
почти 7 лет назад

When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by Python instead of being opened as a text file when the Open option was selected upon download. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 72.

CVSS3: 8.8
debian
почти 7 лет назад

When Python was installed on Windows, a python file being served with ...

CVSS3: 8.8
fstec
почти 7 лет назад

Уязвимость браузера Mozilla Firefox для Windows, связанная с ошибками при обработке входных данных, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.8
altlinux
почти 7 лет назад

ALT-PU-2020-1110: package `firefox` update to version 72.0.2-alt1

EPSS

Процентиль: 64%
0.01046
Низкий

Дефекты

CWE-20