CVE-2022-31746

Опубликовано: 22 дек. 2022

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header. This vulnerability affects Firefox for iOS < 102.

Ссылки

https://bugzilla.mozilla.org/show_bug.cgi?id=1654416
Issue Tracking
https://www.mozilla.org/security/advisories/mfsa2022-27/
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1654416
Issue Tracking
https://www.mozilla.org/security/advisories/mfsa2022-27/
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1654416
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:iphone_os:*:*

Версия до 102.0 (исключая)

EPSS

Процентиль: 60%

0.00399

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVE-2022-31746

CVSS3: 6.5

ubuntu

почти 3 года назад

Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header. This vulnerability affects Firefox for iOS < 102.

CVE-2022-31746

CVSS3: 6.5

debian

почти 3 года назад

Internal URLs are protected by a secret UUID key, which could have bee ...

GHSA-5mgf-9mwf-m64w

CVSS3: 6.5

github

почти 3 года назад

Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header. This vulnerability affects Firefox for iOS < 102.

EPSS

Процентиль: 60%

0.00399

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-200