Описание
WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been uninstalled with the extension. This vulnerability affects Firefox < 95.
Релиз | Статус | Примечание |
---|---|---|
bionic | released | 95.0+build1-0ubuntu0.18.04.1 |
devel | released | 95.0+build1-0ubuntu1 |
esm-infra-legacy/trusty | DNE | |
esm-infra/focal | DNE | |
focal | released | 95.0+build1-0ubuntu0.20.04.1 |
hirsute | released | 95.0+build1-0ubuntu0.21.04.1 |
impish | released | 95.0+build1-0ubuntu0.21.10.1 |
jammy | released | 95.0+build1-0ubuntu1 |
kinetic | released | 95.0+build1-0ubuntu1 |
lunar | released | 95.0+build1-0ubuntu1 |
Показывать по
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been uninstalled with the extension. This vulnerability affects Firefox < 95.
WebExtensions with the correct permissions were able to create and ins ...
WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been uninstalled with the extension. This vulnerability affects Firefox < 95.
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3