Уязвимость перехода в полноэкранный режим без уведомления в браузерах Firefox и Thunderbird, ведущая к атаке спуфинга
Описание
Через серию навигаций браузер Firefox переходит в полноэкранный режим без уведомления или предупреждения пользователя. Это приводит к атакам спуфинга на интерфейс браузера, включая фишинг.
Затронутые версии ПО
- Firefox версии ниже 94
- Thunderbird версии ниже 91.3
- Firefox ESR версии ниже 91.3
Тип уязвимости
- Спуфинг
- Фишинг
Ссылки
- Issue TrackingPermissions RequiredVendor Advisory
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Issue TrackingPermissions RequiredVendor Advisory
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одно из
Одно из
EPSS
4.3 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
Связанные уязвимости
Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user. This could lead to spoofing attacks on the browser UI including phishing. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user. This could lead to spoofing attacks on the browser UI including phishing. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
Through a series of navigations, Firefox could have entered fullscreen ...
Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user. This could lead to spoofing attacks on the browser UI including phishing. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
Уязвимость браузера Mozilla Firefox, связанная с недостаточным предупреждением об опасных действиях, позволяющая нарушителю провести атаку с использованием спуфинга
EPSS
4.3 Medium
CVSS3
4.3 Medium
CVSS2