Поиск уязвимостей
Количество 9
Количество 9
CVE-2022-22758
When clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be included in the phone number. On certain phones, or on certain carriers, if the number was dialed this could perform actions on a user's account, similar to a cross-site request forgery attack.<br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 97.
CVE-2022-22758
When clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be included in the phone number. On certain phones, or on certain carriers, if the number was dialed this could perform actions on a user's account, similar to a cross-site request forgery attack.<br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 97.
CVE-2022-22758
When clicking on a tel: link, USSD codes, specified after a <code>\*</ ...
GHSA-x7x8-qh7j-2q6h
When clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be included in the phone number. On certain phones, or on certain carriers, if the number was dialed this could perform actions on a user's account, similar to a cross-site request forgery attack.<br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 97.
BDU:2022-06140
Уязвимость браузера Mozilla Firefox для Android, связанная с ошибками в обработчике USSD-кодов, позволяющая нарушителю выполнить произвольный код
ALT-PU-2022-1230
ALT-PU-2022-1230: package `firefox` update to version 97.0-alt1
ALT-PU-2022-2458
ALT-PU-2022-2458: package `firefox-esr` update to version 102.1.0-alt1
ALT-PU-2022-2929
ALT-PU-2022-2929: package `firefox-esr` update to version 102.2.0-alt2
ALT-PU-2022-2930
ALT-PU-2022-2930: package `firefox` update to version 105.0.1-alt0.p10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-22758 When clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be included in the phone number. On certain phones, or on certain carriers, if the number was dialed this could perform actions on a user's account, similar to a cross-site request forgery attack.<br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 97. | CVSS3: 8.8 | 0% Низкий | почти 4 года назад |
 | CVE-2022-22758 When clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be included in the phone number. On certain phones, or on certain carriers, if the number was dialed this could perform actions on a user's account, similar to a cross-site request forgery attack.<br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 97. | CVSS3: 8.8 | 0% Низкий | почти 4 года назад |
| CVE-2022-22758 When clicking on a tel: link, USSD codes, specified after a <code>\*</ ... | CVSS3: 8.8 | 0% Низкий | почти 4 года назад |
| GHSA-x7x8-qh7j-2q6h When clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be included in the phone number. On certain phones, or on certain carriers, if the number was dialed this could perform actions on a user's account, similar to a cross-site request forgery attack.<br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 97. | CVSS3: 8.8 | 0% Низкий | почти 4 года назад |
 | BDU:2022-06140 Уязвимость браузера Mozilla Firefox для Android, связанная с ошибками в обработчике USSD-кодов, позволяющая нарушителю выполнить произвольный код | CVSS3: 5.4 | 0% Низкий | почти 5 лет назад |
| ALT-PU-2022-1230 ALT-PU-2022-1230: package `firefox` update to version 97.0-alt1 | CVSS3: 9.6 | больше 4 лет назад | |
| ALT-PU-2022-2458 ALT-PU-2022-2458: package `firefox-esr` update to version 102.1.0-alt1 | CVSS3: 9.8 | около 4 лет назад | |
| ALT-PU-2022-2929 ALT-PU-2022-2929: package `firefox-esr` update to version 102.2.0-alt2 | CVSS3: 9.8 | около 4 лет назад | |
| ALT-PU-2022-2930 ALT-PU-2022-2930: package `firefox` update to version 105.0.1-alt0.p10.1 | CVSS3: 10 | около 4 лет назад |
Уязвимостей на страницу