Описание
When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox < 103.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 103.0+build1-0ubuntu0.18.04.1 |
| devel | not-affected | code not present |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | released | 103.0+build1-0ubuntu0.20.04.1 |
| jammy | not-affected | code not present |
| kinetic | not-affected | code not present |
| lunar | not-affected | code not present |
| trusty | ignored | end of standard support |
| trusty/esm | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | not-affected | 1:102.3.3+build1-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | released | 1:102.2.2+build1-0ubuntu0.20.04.1 |
| jammy | released | 1:102.2.2+build1-0ubuntu0.22.04.1 |
| kinetic | ignored | end of life, was needed |
| lunar | not-affected | 1:102.3.3+build1-0ubuntu1 |
| trusty | ignored | end of standard support |
| trusty/esm | DNE |
Показывать по
EPSS
6.1 Medium
CVSS3
Связанные уязвимости
When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox < 103.
When using the Performance API, an attacker was able to notice subtle ...
When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox < 103.
Уязвимость веб-браузера Firefox, связанная с недостаточной защитой служебных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ALT-PU-2023-5754: package `firefox-esr` update to version 115.2.1-alt1
EPSS
6.1 Medium
CVSS3