Поиск уязвимостей
Количество 8
Количество 8
GHSA-9467-r3c9-7387
Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This vulnerability affects Firefox < 64.
CVE-2018-18497
Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This vulnerability affects Firefox < 64.
CVE-2018-18497
Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This vulnerability affects Firefox < 64.
CVE-2018-18497
Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This vulnerability affects Firefox < 64.
CVE-2018-18497
Limitations on the URIs allowed to WebExtensions by the browser.window ...
BDU:2020-00610
Уязвимость компонента WebExtension браузера Firefox, связанная с некорректным ограничением URI, позволяющая нарушителю получить доступ к конфиденциальным данным
ALT-PU-2018-2963
ALT-PU-2018-2963: package `firefox` update to version 64.0-alt1
ALT-PU-2019-2324
ALT-PU-2019-2324: package `firefox-esr` update to version 68.0.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-9467-r3c9-7387 Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This vulnerability affects Firefox < 64. | CVSS3: 6.5 | 2% Низкий | больше 4 лет назад |
 | CVE-2018-18497 Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This vulnerability affects Firefox < 64. | CVSS3: 6.5 | 2% Низкий | больше 7 лет назад |
 | CVE-2018-18497 Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This vulnerability affects Firefox < 64. | CVSS3: 6.5 | 2% Низкий | почти 8 лет назад |
 | CVE-2018-18497 Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This vulnerability affects Firefox < 64. | CVSS3: 6.5 | 2% Низкий | больше 7 лет назад |
| CVE-2018-18497 Limitations on the URIs allowed to WebExtensions by the browser.window ... | CVSS3: 6.5 | 2% Низкий | больше 7 лет назад |
 | BDU:2020-00610 Уязвимость компонента WebExtension браузера Firefox, связанная с некорректным ограничением URI, позволяющая нарушителю получить доступ к конфиденциальным данным | CVSS3: 6.5 | 2% Низкий | больше 7 лет назад |
| ALT-PU-2018-2963 ALT-PU-2018-2963: package `firefox` update to version 64.0-alt1 | CVSS3: 9.8 | почти 8 лет назад | |
| ALT-PU-2019-2324 ALT-PU-2019-2324: package `firefox-esr` update to version 68.0.1-alt1 | CVSS3: 9.8 | больше 7 лет назад |
Уязвимостей на страницу