Поиск уязвимостей
Количество 8
Количество 8
CVE-2020-15682
When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in. An attacker could induce that prompt to be associated with an origin they didn't control, resulting in a spoofing attack. This was fixed by changing external protocol prompts to be tab-modal while also ensuring they could not be incorrectly associated with a different origin. This vulnerability affects Firefox < 82.
CVE-2020-15682
When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in. An attacker could induce that prompt to be associated with an origin they didn't control, resulting in a spoofing attack. This was fixed by changing external protocol prompts to be tab-modal while also ensuring they could not be incorrectly associated with a different origin. This vulnerability affects Firefox < 82.
CVE-2020-15682
When a link to an external protocol was clicked, a prompt was presente ...
GHSA-hx45-gw2r-332x
When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in. An attacker could induce that prompt to be associated with an origin they didn't control, resulting in a spoofing attack. This was fixed by changing external protocol prompts to be tab-modal while also ensuring they could not be incorrectly associated with a different origin. This vulnerability affects Firefox < 82.
BDU:2022-05932
Уязвимость браузера Mozilla Firefox, связанная с недостатком в механизме подтверждения источника данных, позволяющая нарушителю проводить спуфинг-атаки
ALT-PU-2020-3120
ALT-PU-2020-3120: package `firefox` update to version 82.0-alt1
ALT-PU-2021-2725
ALT-PU-2021-2725: package `firefox-esr` update to version 91.0.1-alt1
ALT-PU-2021-2881
ALT-PU-2021-2881: package `firefox-esr` update to version 91.1.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-15682 When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in. An attacker could induce that prompt to be associated with an origin they didn't control, resulting in a spoofing attack. This was fixed by changing external protocol prompts to be tab-modal while also ensuring they could not be incorrectly associated with a different origin. This vulnerability affects Firefox < 82. | CVSS3: 6.5 | 0% Низкий | около 6 лет назад |
 | CVE-2020-15682 When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in. An attacker could induce that prompt to be associated with an origin they didn't control, resulting in a spoofing attack. This was fixed by changing external protocol prompts to be tab-modal while also ensuring they could not be incorrectly associated with a different origin. This vulnerability affects Firefox < 82. | CVSS3: 6.5 | 0% Низкий | около 6 лет назад |
| CVE-2020-15682 When a link to an external protocol was clicked, a prompt was presente ... | CVSS3: 6.5 | 0% Низкий | около 6 лет назад |
| GHSA-hx45-gw2r-332x When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in. An attacker could induce that prompt to be associated with an origin they didn't control, resulting in a spoofing attack. This was fixed by changing external protocol prompts to be tab-modal while also ensuring they could not be incorrectly associated with a different origin. This vulnerability affects Firefox < 82. | 0% Низкий | больше 4 лет назад | |
 | BDU:2022-05932 Уязвимость браузера Mozilla Firefox, связанная с недостатком в механизме подтверждения источника данных, позволяющая нарушителю проводить спуфинг-атаки | CVSS3: 6.5 | 0% Низкий | около 6 лет назад |
| ALT-PU-2020-3120 ALT-PU-2020-3120: package `firefox` update to version 82.0-alt1 | CVSS3: 9.8 | около 6 лет назад | |
| ALT-PU-2021-2725 ALT-PU-2021-2725: package `firefox-esr` update to version 91.0.1-alt1 | CVSS3: 9.8 | около 5 лет назад | |
| ALT-PU-2021-2881 ALT-PU-2021-2881: package `firefox-esr` update to version 91.1.0-alt1 | CVSS3: 9.8 | около 5 лет назад |
Уязвимостей на страницу