PT-2020-16581

CVE-2020-26967

·

تاريخ النشر

2020-11-17

·

تاريخ التحديث

2024-12-12

الوصف من

CVSS 3.1
6.5
متوسطة
المقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 83
Description A malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page when listening for page changes with a Mutation Observer. This would lead to internal errors and unexpected behavior in the Screenshots code.
Recommendations For versions prior to 83, update to version 83 or later to resolve the issue. As a temporary workaround, consider disabling the use of Mutation Observers in Firefox Screenshots until a patch is available. Restrict access to sensitive elements to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALT-PU-2020-3384
ALT-PU-2021-2725
ALT-PU-2021-2881
ALT-PU-2021-3368
ALT-PU-2021-3369
ALT-PU-2022-1781
ALT-PU-2022-1782
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:14572-1
USN-4637-1
USN-4637-2
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾