Поиск уязвимостей
Количество 10
Количество 10
CVE-2023-23597
A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the `file://` context. Given a reliable exploit primitive, this new process could be exploited again leading to arbitrary file read. This vulnerability affects Firefox < 109.
CVE-2023-23597
A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the `file://` context. Given a reliable exploit primitive, this new process could be exploited again leading to arbitrary file read. This vulnerability affects Firefox < 109.
CVE-2023-23597
Logic bug in process allocation allowed to read arbitrary files
CVE-2023-23597
A compromised web child process could disable web security opening res ...
GHSA-5gvm-v5f4-x692
A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the <code>file://</code> context. Given a reliable exploit primitive, this new process could be exploited again leading to arbitrary file read. This vulnerability affects Firefox < 109.
BDU:2023-00597
Уязвимость браузера Mozilla Firefox, связанная с ошибками в настройках безопасности, позволяющая нарушителю читать произвольные файлы
ALT-PU-2023-1084
ALT-PU-2023-1084: package `firefox` update to version 109.0-alt1
ALT-PU-2023-1478
ALT-PU-2023-1478: package `firefox` update to version 110.0.1-alt0.p10.1
ALT-PU-2023-5754
ALT-PU-2023-5754: package `firefox-esr` update to version 115.2.1-alt1
ALT-PU-2023-6436
ALT-PU-2023-6436: package `firefox-esr` update to version 115.3.1-alt4
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-23597 A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the `file://` context. Given a reliable exploit primitive, this new process could be exploited again leading to arbitrary file read. This vulnerability affects Firefox < 109. | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
 | CVE-2023-23597 A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the `file://` context. Given a reliable exploit primitive, this new process could be exploited again leading to arbitrary file read. This vulnerability affects Firefox < 109. | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
 | CVE-2023-23597 Logic bug in process allocation allowed to read arbitrary files | 0% Низкий | около 1 года назад | |
| CVE-2023-23597 A compromised web child process could disable web security opening res ... | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
| GHSA-5gvm-v5f4-x692 A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the <code>file://</code> context. Given a reliable exploit primitive, this new process could be exploited again leading to arbitrary file read. This vulnerability affects Firefox < 109. | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
 | BDU:2023-00597 Уязвимость браузера Mozilla Firefox, связанная с ошибками в настройках безопасности, позволяющая нарушителю читать произвольные файлы | CVSS3: 7.5 | 0% Низкий | почти 4 года назад |
| ALT-PU-2023-1084 ALT-PU-2023-1084: package `firefox` update to version 109.0-alt1 | CVSS3: 8.8 | почти 4 года назад | |
| ALT-PU-2023-1478 ALT-PU-2023-1478: package `firefox` update to version 110.0.1-alt0.p10.1 | CVSS3: 9.8 | больше 3 лет назад | |
| ALT-PU-2023-5754 ALT-PU-2023-5754: package `firefox-esr` update to version 115.2.1-alt1 | CVSS3: 10 | около 3 лет назад | |
| ALT-PU-2023-6436 ALT-PU-2023-6436: package `firefox-esr` update to version 115.3.1-alt4 | CVSS3: 10 | около 3 лет назад |
Уязвимостей на страницу