Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wg7m-wv28-cvcr

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files picked. Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 68.11.

Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files picked. Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 68.11.

EPSS

Процентиль: 47%
0.00243
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 5 лет назад

Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files picked. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.11.

CVSS3: 6.1
redhat
больше 5 лет назад

Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files picked. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.11.

CVSS3: 5.5
nvd
больше 5 лет назад

Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files picked. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.11.

CVSS3: 5.5
debian
больше 5 лет назад

Given an installed malicious file picker application, an attacker was ...

CVSS3: 5.5
fstec
больше 5 лет назад

Уязвимость браузера Firefox ESR для операционных систем Android, связанная с отсутствием ограничений на загрузку файлов, позволяющая нарушителю оказать воздействие на конфиденциальность защищаемой информации

EPSS

Процентиль: 47%
0.00243
Низкий