Поиск уязвимостей
Количество 7
Количество 7
CVE-2018-5113
The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was not properly enforced. This can potentially allow privileged pages to be loaded by the extension. This vulnerability affects Firefox < 58.
CVE-2018-5113
The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was not properly enforced. This can potentially allow privileged pages to be loaded by the extension. This vulnerability affects Firefox < 58.
CVE-2018-5113
The "browser.identity.launchWebAuthFlow" function of WebExtensions is ...
GHSA-3r7x-fw6m-4w78
The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was not properly enforced. This can potentially allow privileged pages to be loaded by the extension. This vulnerability affects Firefox < 58.
BDU:2018-00869
Уязвимость функции browser.identity.launchWebAuthFlow расширения WebExtensions браузера Mozilla Firefox, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ALT-PU-2018-1178
ALT-PU-2018-1178: package `firefox` update to version 58.0.2-alt1
ALT-PU-2018-1854
ALT-PU-2018-1854: package `firefox-esr` update to version 60.0.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-5113 The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was not properly enforced. This can potentially allow privileged pages to be loaded by the extension. This vulnerability affects Firefox < 58. | CVSS3: 7.5 | 2% Низкий | больше 8 лет назад |
 | CVE-2018-5113 The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was not properly enforced. This can potentially allow privileged pages to be loaded by the extension. This vulnerability affects Firefox < 58. | CVSS3: 7.5 | 2% Низкий | больше 8 лет назад |
| CVE-2018-5113 The "browser.identity.launchWebAuthFlow" function of WebExtensions is ... | CVSS3: 7.5 | 2% Низкий | больше 8 лет назад |
| GHSA-3r7x-fw6m-4w78 The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was not properly enforced. This can potentially allow privileged pages to be loaded by the extension. This vulnerability affects Firefox < 58. | CVSS3: 7.5 | 2% Низкий | больше 4 лет назад |
 | BDU:2018-00869 Уязвимость функции browser.identity.launchWebAuthFlow расширения WebExtensions браузера Mozilla Firefox, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 7.5 | 2% Низкий | почти 9 лет назад |
| ALT-PU-2018-1178 ALT-PU-2018-1178: package `firefox` update to version 58.0.2-alt1 | CVSS3: 9.8 | больше 8 лет назад | |
| ALT-PU-2018-1854 ALT-PU-2018-1854: package `firefox-esr` update to version 60.0.1-alt1 | CVSS3: 9.8 | больше 8 лет назад |
Уязвимостей на страницу