Описание
Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability affects Firefox < 61.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | released | 61.0+build3-0ubuntu0.17.10.1 |
| bionic | released | 61.0+build3-0ubuntu0.18.04.1 |
| devel | released | 61.0.1+build1-0ubuntu0.18.04.1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [61.0+build3-0ubuntu0.14.04.2]] |
| precise/esm | DNE | |
| trusty | released | 61.0+build3-0ubuntu0.14.04.2 |
| trusty/esm | DNE | trusty was released [61.0+build3-0ubuntu0.14.04.2] |
| upstream | released | 61.0 |
| xenial | released | 61.0+build3-0ubuntu0.16.04.2 |
Показывать по
EPSS
4.3 Medium
CVSS2
4.3 Medium
CVSS3
Связанные уязвимости
Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability affects Firefox < 61.
Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability affects Firefox < 61.
Service workers can use redirection to avoid the tainting of cross-ori ...
Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability affects Firefox < 61.
Уязвимость браузера Firefox, связанная с использованием открытой переадресации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
EPSS
4.3 Medium
CVSS2
4.3 Medium
CVSS3