CVE-2022-42927

CVSS 8.1 HIGHEPSS 0.4%CWE-346

A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via `performance.getEntries()`. This vulnerability affects Firefox < 106, Firefox ESR < 102.4, and Thunderbird < 102.4.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Productos afectados

Mozilla · Firefox Mozilla · Firefox ESR Mozilla · Thunderbird

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://bugzilla.mozilla.org/show_bug.cgi?id=1789128 https://www.mozilla.org/security/advisories/mfsa2022-44/https://www.mozilla.org/security/advisories/mfsa2022-45/https://www.mozilla.org/security/advisories/mfsa2022-46/