Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x2m9-q3vv-hr85

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with the https:// scheme, a blocked port number such as '1', and without a lock icon) while controlling the page contents. This vulnerability affects Firefox < 70.

By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with the https:// scheme, a blocked port number such as '1', and without a lock icon) while controlling the page contents. This vulnerability affects Firefox < 70.

EPSS

Процентиль: 56%
0.00778
Низкий

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 6 лет назад

By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with the https:// scheme, a blocked port number such as '1', and without a lock icon) while controlling the page contents. This vulnerability affects Firefox < 70.

CVSS3: 4.3
redhat
больше 6 лет назад

By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with the https:// scheme, a blocked port number such as '1', and without a lock icon) while controlling the page contents. This vulnerability affects Firefox < 70.

CVSS3: 4.3
nvd
больше 6 лет назад

By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with the https:// scheme, a blocked port number such as '1', and without a lock icon) while controlling the page contents. This vulnerability affects Firefox < 70.

CVSS3: 4.3
debian
больше 6 лет назад

By navigating a tab using the history API, an attacker could cause the ...

CVSS3: 10
altlinux
около 7 лет назад

ALT-PU-2019-3087: package `firefox` update to version 70.0.1-alt1

EPSS

Процентиль: 56%
0.00778
Низкий