GHSA-rwgx-gvrc-xv45

Опубликовано: 17 мая 2022

Источник: github

Github: Не прошло ревью

CVSS3: 4.3

Описание

Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code.

Ссылки

EPSS

Процентиль: 70%

0.01383

Низкий

4.3 Medium

CVSS3

CVE ID

CVE-2016-5279

Дефекты

CWE-200

Связанные уязвимости

CVE-2016-5279

CVSS3: 4.3

ubuntu

почти 10 лет назад

Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code.

CVE-2016-5279

CVSS3: 4.3

redhat

почти 10 лет назад

Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code.

CVE-2016-5279

CVSS3: 4.3

nvd

почти 10 лет назад

Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code.

CVE-2016-5279

CVSS3: 4.3

debian

почти 10 лет назад

Mozilla Firefox before 49.0 allows user-assisted remote attackers to o ...

openSUSE-SU-2016:2368-1

suse-cvrf

почти 10 лет назад

Security update for MozillaFirefox, mozilla-nss

EPSS

Процентиль: 70%

0.01383

Низкий

4.3 Medium

CVSS3

CVE ID

CVE-2016-5279

Дефекты

CWE-200