Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rcq3-vgfc-jm9v

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This vulnerability affects Firefox < 82.

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This vulnerability affects Firefox < 82.

EPSS

Процентиль: 55%
0.00318
Низкий

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 5 лет назад

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This vulnerability affects Firefox < 82.

CVSS3: 5.3
nvd
больше 5 лет назад

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This vulnerability affects Firefox < 82.

CVSS3: 5.3
debian
больше 5 лет назад

If a valid external protocol handler was referenced in an image tag, t ...

CVSS3: 5.3
fstec
больше 5 лет назад

Уязвимость браузера Mozilla Firefox, связанная с раскрытием информации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 55%
0.00318
Низкий