Логотип exploitDog
bind:CVE-2025-4088
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-4088

Количество 6

Количество 6

ubuntu логотип

CVE-2025-4088

7 месяцев назад

A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability affects Firefox < 138 and Thunderbird < 138.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2025-4088

7 месяцев назад

A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability affects Firefox < 138 and Thunderbird < 138.

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2025-4088

7 месяцев назад

A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability affects Firefox < 138 and Thunderbird < 138.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2025-4088

7 месяцев назад

A security vulnerability in Thunderbird allowed malicious sites to use ...

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-vvxh-6r52-hj35

7 месяцев назад

A security vulnerability in Firefox allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability affects Firefox < 138 and Thunderbird < 138.

CVSS3: 6.5
EPSS: Низкий
fstec логотип

BDU:2025-05382

7 месяцев назад

Уязвимость интерфейса Storage Access API браузера Mozilla Firefox и почтового клиента Thunderbird, позволяющая нарушителю осуществить CSRF-атаку

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-4088

A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability affects Firefox < 138 and Thunderbird < 138.

CVSS3: 6.5
0%
Низкий
7 месяцев назад
redhat логотип
CVE-2025-4088

A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability affects Firefox < 138 and Thunderbird < 138.

CVSS3: 5.4
0%
Низкий
7 месяцев назад
nvd логотип
CVE-2025-4088

A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability affects Firefox < 138 and Thunderbird < 138.

CVSS3: 6.5
0%
Низкий
7 месяцев назад
debian логотип
CVE-2025-4088

A security vulnerability in Thunderbird allowed malicious sites to use ...

CVSS3: 6.5
0%
Низкий
7 месяцев назад
github логотип
GHSA-vvxh-6r52-hj35

A security vulnerability in Firefox allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability affects Firefox < 138 and Thunderbird < 138.

CVSS3: 6.5
0%
Низкий
7 месяцев назад
fstec логотип
BDU:2025-05382

Уязвимость интерфейса Storage Access API браузера Mozilla Firefox и почтового клиента Thunderbird, позволяющая нарушителю осуществить CSRF-атаку

CVSS3: 6.5
0%
Низкий
7 месяцев назад

Уязвимостей на страницу