Описание
When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the WebRequest permission for the hosts involved in the redirect, this would be a same-origin-violation leaking data the Web Extension should have access to. This was fixed to provide the pre-redirect URL. This is related to CVE-2021-43532 but in the context of Web Extensions. This vulnerability affects Firefox < 94.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 94.0+build3-0ubuntu0.18.04.1 |
| devel | not-affected | 94.0+build3-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | not-affected | 94.0+build3-0ubuntu0.20.04.1 |
| hirsute | not-affected | 94.0+build3-0ubuntu0.21.04.1 |
| impish | not-affected | 94.0+build3-0ubuntu0.21.10.1 |
| jammy | not-affected | 94.0+build3-0ubuntu1 |
| kinetic | not-affected | 94.0+build3-0ubuntu1 |
| lunar | not-affected | 94.0+build3-0ubuntu1 |
Показывать по
4.3 Medium
CVSS2
4.3 Medium
CVSS3
Связанные уязвимости
When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the WebRequest permission for the hosts involved in the redirect, this would be a same-origin-violation leaking data the Web Extension should have access to. This was fixed to provide the pre-redirect URL. This is related to CVE-2021-43532 but in the context of Web Extensions. This vulnerability affects Firefox < 94.
When a user loaded a Web Extensions context menu, the Web Extension co ...
When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the WebRequest permission for the hosts involved in the redirect, this would be a same-origin-violation leaking data the Web Extension should have access to. This was fixed to provide the pre-redirect URL. This is related to CVE-2021-43532 but in the context of Web Extensions. This vulnerability affects Firefox < 94.
Уязвимость браузера Mozilla Firefox, связанная с недостатком в механизме подтверждения источника, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ALT-PU-2021-3391: package `firefox` update to version 94.0-alt1
4.3 Medium
CVSS2
4.3 Medium
CVSS3