Уязвимость утечки информации из-за некорректной обработки Content Security Policy в Mozilla Firefox и Thunderbird
Описание
Если Content Security Policy (CSP) блокировал навигацию внутри фрейма, в отчете о нарушении указывался полный адрес назначения перенаправления, обслуживаемого внутри фрейма, вместо исходного URI фрейма. Это могло использоваться для утечки конфиденциальной информации, содержащейся в таких URI.
Затронутые версии ПО
- Firefox версий до 86
- Thunderbird версий до 78.8
- Firefox ESR версий до 78.8
Тип уязвимости
Утечка информации
Ссылки
- Issue TrackingPermissions RequiredVendor Advisory
- Mailing ListThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Release NotesVendor Advisory
- Release NotesVendor Advisory
- Release NotesVendor Advisory
- Issue TrackingPermissions RequiredVendor Advisory
- Mailing ListThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Release NotesVendor Advisory
- Release NotesVendor Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Одно из
Одно из
EPSS
4.3 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
Связанные уязвимости
If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI. This could be used to leak sensitive information contained in such URIs. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.
If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI. This could be used to leak sensitive information contained in such URIs. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.
If Content Security Policy blocked frame navigation, the full destinat ...
If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI. This could be used to leak sensitive information contained in such URIs. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.
EPSS
4.3 Medium
CVSS3
4.3 Medium
CVSS2