GHSA-xvx2-w5pj-9472

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI.
Note: This issue only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 68.7.

Ссылки

EPSS

Процентиль: 55%

0.00321

Низкий

CVE ID

CVE-2020-6827

Связанные уязвимости

CVE-2020-6827

CVSS3: 4.7

redhat

больше 5 лет назад

When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI. <br> *Note: This issue only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.7.