Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rg79-6j3q-wm5h

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A vulnerability where WebExtensions can download and attempt to open a file of some non-executable file types. This can be triggered without specific user interaction for the file download and open actions. This could be used to trigger known vulnerabilities in the programs that handle those document types. This vulnerability affects Firefox < 56.

A vulnerability where WebExtensions can download and attempt to open a file of some non-executable file types. This can be triggered without specific user interaction for the file download and open actions. This could be used to trigger known vulnerabilities in the programs that handle those document types. This vulnerability affects Firefox < 56.

EPSS

Процентиль: 85%
0.02595
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 7 лет назад

A vulnerability where WebExtensions can download and attempt to open a file of some non-executable file types. This can be triggered without specific user interaction for the file download and open actions. This could be used to trigger known vulnerabilities in the programs that handle those document types. This vulnerability affects Firefox < 56.

CVSS3: 9.8
nvd
больше 7 лет назад

A vulnerability where WebExtensions can download and attempt to open a file of some non-executable file types. This can be triggered without specific user interaction for the file download and open actions. This could be used to trigger known vulnerabilities in the programs that handle those document types. This vulnerability affects Firefox < 56.

CVSS3: 9.8
debian
больше 7 лет назад

A vulnerability where WebExtensions can download and attempt to open a ...

CVSS3: 9.8
fstec
почти 9 лет назад

Уязвимость модуля WebExtensions браузера Mozilla Firefox, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 85%
0.02595
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-732