Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w3cw-f63h-9g34

Опубликовано: 18 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability affects Firefox for iOS < 144.0.

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability affects Firefox for iOS < 144.0.

EPSS

Процентиль: 7%
0.00175
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-451

Связанные уязвимости

CVSS3: 6.5
ubuntu
8 месяцев назад

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0.

CVSS3: 6.5
nvd
8 месяцев назад

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0.

CVSS3: 6.5
debian
8 месяцев назад

Unicode RTLO characters could allow malicious websites to spoof filena ...

CVSS3: 6.5
fstec
8 месяцев назад

Уязвимость компонента Downloads (Загрузки) браузера Firefox операционных систем iOS, позволяющая нарушителю проводить спуфинг-атаки

EPSS

Процентиль: 7%
0.00175
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-451