Описание
A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, including cookies for other origins. This vulnerability affects Firefox for < Android.
Ссылки
- Issue TrackingVendor Advisory
- Vendor Advisory
- Issue TrackingVendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одновременно
EPSS
7.4 High
CVSS3
5 Medium
CVSS2
Дефекты
Связанные уязвимости
A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, including cookies for other origins. This vulnerability affects Firefox for < Android.
A Content Provider in Firefox for Android allowed local files accessib ...
A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, including cookies for other origins. This vulnerability affects Firefox for < Android.
ALT-PU-2020-2408: package `firefox-esr` update to version 78.0.2-alt1
ALT-PU-2019-2686: package `firefox` update to version 69.0-alt1
EPSS
7.4 High
CVSS3
5 Medium
CVSS2