Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xg8q-ggjx-6hx2

Опубликовано: 27 мая 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability affects Firefox < 139 and Firefox ESR < 128.11.

A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability affects Firefox < 139 and Firefox ESR < 128.11.

EPSS

Процентиль: 19%
0.0006
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-1021

Связанные уязвимости

CVSS3: 5.4
ubuntu
23 дня назад

A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability affects Firefox < 139, Firefox ESR < 128.11, Thunderbird < 139, and Thunderbird < 128.11.

CVSS3: 3.4
redhat
23 дня назад

A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability affects Firefox < 139, Firefox ESR < 128.11, Thunderbird < 139, and Thunderbird < 128.11.

CVSS3: 5.4
nvd
23 дня назад

A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability affects Firefox < 139, Firefox ESR < 128.11, Thunderbird < 139, and Thunderbird < 128.11.

CVSS3: 5.4
debian
23 дня назад

A clickjacking vulnerability could have been used to trick a user into ...

CVSS3: 5.4
fstec
23 дня назад

Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с некорректным ограничением визуализированных слоев пользовательского интерфейса, позволяющая нарушителю провести атаку типа clickjacking («захват клика»)

EPSS

Процентиль: 19%
0.0006
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-1021