Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rcq3-vgfc-jm9v

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This vulnerability affects Firefox < 82.

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This vulnerability affects Firefox < 82.

EPSS

Процентиль: 58%
0.00947
Низкий

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 6 лет назад

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This vulnerability affects Firefox < 82.

CVSS3: 5.3
nvd
почти 6 лет назад

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This vulnerability affects Firefox < 82.

CVSS3: 5.3
debian
почти 6 лет назад

If a valid external protocol handler was referenced in an image tag, t ...

CVSS3: 5.3
fstec
почти 6 лет назад

Уязвимость браузера Mozilla Firefox, связанная с раскрытием информации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 58%
0.00947
Низкий