Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vp32-xxhm-ppgv

Опубликовано: 14 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another application's manifest. This could have been exploited to run arbitrary code in another application's context. This issue only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox < 126.

Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another application's manifest. This could have been exploited to run arbitrary code in another application's context. This issue only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox < 126.

EPSS

Процентиль: 23%
0.00071
Низкий

8.1 High

CVSS3

Дефекты

CWE-327

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 1 года назад

Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another application's manifest. This could have been exploited to run arbitrary code in another application's context. *This issue only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 126.

CVSS3: 8.1
nvd
около 1 года назад

Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another application's manifest. This could have been exploited to run arbitrary code in another application's context. *This issue only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 126.

CVSS3: 8.1
debian
около 1 года назад

Web application manifests were stored by using an insecure MD5 hash wh ...

EPSS

Процентиль: 23%
0.00071
Низкий

8.1 High

CVSS3

Дефекты

CWE-327