Поиск уязвимостей
Количество 8
Количество 8
BDU:2021-00118
Уязвимость реализации механизма CSP (Content Security Policy) браузера Mozilla Firefox, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
CVE-2017-7808
A content security policy (CSP) "frame-ancestors" directive containing origins with paths allows for comparisons against those paths instead of the origin. This results in a cross-origin information leak of this path information. This vulnerability affects Firefox < 55.
CVE-2017-7808
A content security policy (CSP) "frame-ancestors" directive containing origins with paths allows for comparisons against those paths instead of the origin. This results in a cross-origin information leak of this path information. This vulnerability affects Firefox < 55.
CVE-2017-7808
A content security policy (CSP) "frame-ancestors" directive containing origins with paths allows for comparisons against those paths instead of the origin. This results in a cross-origin information leak of this path information. This vulnerability affects Firefox < 55.
CVE-2017-7808
A content security policy (CSP) "frame-ancestors" directive containing ...
GHSA-hgfv-gvcw-686v
A content security policy (CSP) "frame-ancestors" directive containing origins with paths allows for comparisons against those paths instead of the origin. This results in a cross-origin information leak of this path information. This vulnerability affects Firefox < 55.
ALT-PU-2017-2060
ALT-PU-2017-2060: package `firefox` update to version 55.0.1-alt1
ALT-PU-2018-1854
ALT-PU-2018-1854: package `firefox-esr` update to version 60.0.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2021-00118 Уязвимость реализации механизма CSP (Content Security Policy) браузера Mozilla Firefox, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 5.3 | 1% Низкий | больше 9 лет назад |
 | CVE-2017-7808 A content security policy (CSP) "frame-ancestors" directive containing origins with paths allows for comparisons against those paths instead of the origin. This results in a cross-origin information leak of this path information. This vulnerability affects Firefox < 55. | CVSS3: 5.3 | 1% Низкий | больше 8 лет назад |
 | CVE-2017-7808 A content security policy (CSP) "frame-ancestors" directive containing origins with paths allows for comparisons against those paths instead of the origin. This results in a cross-origin information leak of this path information. This vulnerability affects Firefox < 55. | CVSS3: 6.1 | 1% Низкий | больше 9 лет назад |
 | CVE-2017-7808 A content security policy (CSP) "frame-ancestors" directive containing origins with paths allows for comparisons against those paths instead of the origin. This results in a cross-origin information leak of this path information. This vulnerability affects Firefox < 55. | CVSS3: 5.3 | 1% Низкий | больше 8 лет назад |
| CVE-2017-7808 A content security policy (CSP) "frame-ancestors" directive containing ... | CVSS3: 5.3 | 1% Низкий | больше 8 лет назад |
| GHSA-hgfv-gvcw-686v A content security policy (CSP) "frame-ancestors" directive containing origins with paths allows for comparisons against those paths instead of the origin. This results in a cross-origin information leak of this path information. This vulnerability affects Firefox < 55. | CVSS3: 5.3 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2017-2060 ALT-PU-2017-2060: package `firefox` update to version 55.0.1-alt1 | CVSS3: 9.8 | около 9 лет назад | |
| ALT-PU-2018-1854 ALT-PU-2018-1854: package `firefox-esr` update to version 60.0.1-alt1 | CVSS3: 9.8 | больше 8 лет назад |
Уязвимостей на страницу