Уязвимость некорректной проверки состояния Browsing Context в Firefox и Thunderbird
Описание
При проверке, был ли удален контекст просмотра (Browsing Context) в HttpBaseChannel, если группа загрузки (load group) была недоступна, предполагалось, что контекст уже был удален. Однако это не всегда было верно для приватных каналов после завершения приватной сессии.
Затронутые версии ПО
- Firefox < 117
- Firefox ESR < 115.2
- Thunderbird < 115.2
Тип уязвимости
- Некорректная обработка данных
- Логическая ошибка
Ссылки
- Issue Tracking
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Issue Tracking
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
7.5 High
CVSS3
Дефекты
Связанные уязвимости
When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have already been discarded which was not always the case for private channels after the private session had ended. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.
When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have already been discarded which was not always the case for private channels after the private session had ended. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.
When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have already been discarded which was not always the case for private channels after the private session had ended. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.
When checking if the Browsing Context had been discarded in `HttpBaseC ...
When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have already been discarded which was not always the case for private channels after the private session had ended. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.
EPSS
7.5 High
CVSS3