PT-2022-7089 · Mozilla+5 · Firefox+5
CVSS v2.0
10
عالية
| المتجه | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 102
Description
The issue is related to insufficient warnings about dangerous actions in Mozilla Firefox. An attacker could exploit this by manipulating a filename to contain an executable extension when a user drags and drops an image to a filesystem, potentially tricking the user into executing malicious code.
Recommendations
For versions prior to 102, update to version 102 or later to resolve the issue. As a temporary workaround, consider avoiding dragging and dropping images to the filesystem until a patch is available. Restrict access to executable extensions to minimize the risk of exploitation.
استغلال
إصلاح
Unrestricted File Upload
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
المعرّفات ذات الصلة
المنتجات المتأثرة
Alt Linux
Astra Linux
Linuxmint
Firefox
Suse
Ubuntu