PT-2017-4024
CVE-2017-7812
·
تاريخ النشر
2017-07-10
·
تاريخ التحديث
2024-12-12
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 56
Description
The issue is related to the browser's behavior when web content is dragged onto certain parts of the browser UI, such as the tab bar. This can lead to the opening of links that would otherwise be restricted, potentially allowing malicious web content to open locally stored files through
file: URLs. The vulnerability may also be exploited to conduct cross-site scripting attacks.Recommendations
For versions prior to 56, update to version 56 or later to resolve the issue. As a temporary workaround, consider avoiding dragging web content onto the browser UI to minimize the risk of exploitation. Restrict access to sensitive local files to prevent potential malicious activity.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾