Поиск уязвимостей
Количество 7
Количество 7
GHSA-xmc5-26p9-v4x6
WebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the appropriate permissions and then using host requests to redirect script loads to a malicious site. This allows a malicious extension to then install additional extensions without explicit user permission. This vulnerability affects Firefox < 51.
CVE-2017-5389
WebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the appropriate permissions and then using host requests to redirect script loads to a malicious site. This allows a malicious extension to then install additional extensions without explicit user permission. This vulnerability affects Firefox < 51.
CVE-2017-5389
WebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the appropriate permissions and then using host requests to redirect script loads to a malicious site. This allows a malicious extension to then install additional extensions without explicit user permission. This vulnerability affects Firefox < 51.
CVE-2017-5389
WebExtensions could use the "mozAddonManager" API by modifying the CSP ...
openSUSE-SU-2017:0358-1
Security update for MozillaFirefox
ALT-PU-2017-1138
ALT-PU-2017-1138: package `firefox` update to version 51.0.1-alt1
ALT-PU-2017-1578
ALT-PU-2017-1578: package `firefox-esr` update to version 52.1.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-xmc5-26p9-v4x6 WebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the appropriate permissions and then using host requests to redirect script loads to a malicious site. This allows a malicious extension to then install additional extensions without explicit user permission. This vulnerability affects Firefox < 51. | CVSS3: 6.1 | 1% Низкий | больше 4 лет назад |
 | CVE-2017-5389 WebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the appropriate permissions and then using host requests to redirect script loads to a malicious site. This allows a malicious extension to then install additional extensions without explicit user permission. This vulnerability affects Firefox < 51. | CVSS3: 6.1 | 1% Низкий | больше 8 лет назад |
 | CVE-2017-5389 WebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the appropriate permissions and then using host requests to redirect script loads to a malicious site. This allows a malicious extension to then install additional extensions without explicit user permission. This vulnerability affects Firefox < 51. | CVSS3: 6.1 | 1% Низкий | больше 8 лет назад |
| CVE-2017-5389 WebExtensions could use the "mozAddonManager" API by modifying the CSP ... | CVSS3: 6.1 | 1% Низкий | больше 8 лет назад |
 | openSUSE-SU-2017:0358-1 Security update for MozillaFirefox | почти 10 лет назад | ||
| ALT-PU-2017-1138 ALT-PU-2017-1138: package `firefox` update to version 51.0.1-alt1 | CVSS3: 9.8 | почти 10 лет назад | |
| ALT-PU-2017-1578 ALT-PU-2017-1578: package `firefox-esr` update to version 52.1.1-alt1 | CVSS3: 9.8 | больше 9 лет назад |
Уязвимостей на страницу