Описание
Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability affects Firefox < 144 and Thunderbird < 144.
Ссылки
- Issue TrackingPermissions Required
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 144.0 (исключая)Версия до 144.0 (исключая)
Одновременно
Одно из
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
EPSS
Процентиль: 7%
0.00028
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-284
Связанные уязвимости
CVSS3: 6.5
ubuntu
20 дней назад
Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability affects Firefox < 144 and Thunderbird < 144.
CVSS3: 6.5
debian
20 дней назад
Links in a sandboxed iframe could open an external app on Android with ...
CVSS3: 6.5
github
20 дней назад
Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability affects Firefox < 144 and Thunderbird < 144.
EPSS
Процентиль: 7%
0.00028
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-284