Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wjv8-8vf9-mrv8

Опубликовано: 14 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability affects Firefox < 144.

The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability affects Firefox < 144.

EPSS

Процентиль: 13%
0.00043
Низкий

8.1 High

CVSS3

Дефекты

CWE-451

Связанные уязвимости

CVSS3: 8.1
ubuntu
20 дней назад

The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability affects Firefox < 144.

CVSS3: 8.1
nvd
20 дней назад

The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability affects Firefox < 144.

CVSS3: 8.1
debian
20 дней назад

The Firefox and Firefox Focus UI for the Android custom tab feature on ...

EPSS

Процентиль: 13%
0.00043
Низкий

8.1 High

CVSS3

Дефекты

CWE-451