Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w4hq-q9jh-6r3x

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

If Media Capture and Streams API permission is requested from documents with "data:" or "blob:" URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown protocol" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 59.

If Media Capture and Streams API permission is requested from documents with "data:" or "blob:" URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown protocol" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 59.

EPSS

Процентиль: 78%
0.01219
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 7 лет назад

If Media Capture and Streams API permission is requested from documents with "data:" or "blob:" URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown protocol" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 59.

CVSS3: 5.3
nvd
около 7 лет назад

If Media Capture and Streams API permission is requested from documents with "data:" or "blob:" URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown protocol" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 59.

CVSS3: 5.3
debian
около 7 лет назад

If Media Capture and Streams API permission is requested from document ...

CVSS3: 5.3
fstec
около 8 лет назад

Уязвимость интерфейса для поддержки потокового аудио и видео данных Media Capture и Streams API браузера Mozilla Firefox, позволяющая нарушителю проводить межсайтовые сценарные атаки

EPSS

Процентиль: 78%
0.01219
Низкий

5.3 Medium

CVSS3