Поиск уязвимостей
Количество 9
Количество 9
CVE-2023-34415
When choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox would load that document in the same process as the site that issued the redirect. This bypassed the site-isolation protections against Spectre-like attacks on sites that host an "open redirect". Firefox no longer follows HTTP redirects to data: URLs. This vulnerability affects Firefox < 114.
CVE-2023-34415
When choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox would load that document in the same process as the site that issued the redirect. This bypassed the site-isolation protections against Spectre-like attacks on sites that host an "open redirect". Firefox no longer follows HTTP redirects to data: URLs. This vulnerability affects Firefox < 114.
CVE-2023-34415
When choosing a site-isolated process for a document loaded from a dat ...
GHSA-7wmp-qghr-8g7f
When choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox would load that document in the same process as the site that issued the redirect. This bypassed the site-isolation protections against Spectre-like attacks on sites that host an "open redirect". Firefox no longer follows HTTP redirects to data: URLs. This vulnerability affects Firefox < 114.
BDU:2023-03197
Уязвимость браузера Mozilla Firefox, связанная с переадресацией URL на ненадежный сайт, позволяющая нарушителю обойти ограничения безопасности и перенаправить пользователя на произвольный URL-адрес
ALT-PU-2023-1974
ALT-PU-2023-1974: package `firefox` update to version 114.0.1-alt1
ALT-PU-2023-5754
ALT-PU-2023-5754: package `firefox-esr` update to version 115.2.1-alt1
ALT-PU-2023-6436
ALT-PU-2023-6436: package `firefox-esr` update to version 115.3.1-alt4
ALT-PU-2024-4241
ALT-PU-2024-4241: package `firefox` update to version 118.0.2-alt0.p10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2023-34415 When choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox would load that document in the same process as the site that issued the redirect. This bypassed the site-isolation protections against Spectre-like attacks on sites that host an "open redirect". Firefox no longer follows HTTP redirects to data: URLs. This vulnerability affects Firefox < 114. | CVSS3: 6.1 | 0% Низкий | больше 3 лет назад | |
CVE-2023-34415 When choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox would load that document in the same process as the site that issued the redirect. This bypassed the site-isolation protections against Spectre-like attacks on sites that host an "open redirect". Firefox no longer follows HTTP redirects to data: URLs. This vulnerability affects Firefox < 114. | CVSS3: 6.1 | 0% Низкий | больше 3 лет назад | |
CVE-2023-34415 When choosing a site-isolated process for a document loaded from a dat ... | CVSS3: 6.1 | 0% Низкий | больше 3 лет назад | |
GHSA-7wmp-qghr-8g7f When choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox would load that document in the same process as the site that issued the redirect. This bypassed the site-isolation protections against Spectre-like attacks on sites that host an "open redirect". Firefox no longer follows HTTP redirects to data: URLs. This vulnerability affects Firefox < 114. | CVSS3: 6.1 | 0% Низкий | больше 3 лет назад | |
BDU:2023-03197 Уязвимость браузера Mozilla Firefox, связанная с переадресацией URL на ненадежный сайт, позволяющая нарушителю обойти ограничения безопасности и перенаправить пользователя на произвольный URL-адрес | CVSS3: 4.3 | 0% Низкий | больше 3 лет назад | |
ALT-PU-2023-1974 ALT-PU-2023-1974: package `firefox` update to version 114.0.1-alt1 | CVSS3: 9.8 | больше 3 лет назад | ||
ALT-PU-2023-5754 ALT-PU-2023-5754: package `firefox-esr` update to version 115.2.1-alt1 | CVSS3: 10 | около 3 лет назад | ||
ALT-PU-2023-6436 ALT-PU-2023-6436: package `firefox-esr` update to version 115.3.1-alt4 | CVSS3: 10 | около 3 лет назад | ||
ALT-PU-2024-4241 ALT-PU-2024-4241: package `firefox` update to version 118.0.2-alt0.p10.1 | CVSS3: 9.8 | больше 2 лет назад |
Уязвимостей на страницу