PT-2022-7089 · Mozilla+5 · Firefox+5

·

CVE-2022-34483

·

تاريخ النشر

2022-06-28

·

تاريخ التحديث

2024-12-12

CVSS v2.0

10

عالية

المتجهAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 102
Description The issue is related to insufficient warnings about dangerous actions in Mozilla Firefox. An attacker could exploit this by manipulating a filename to contain an executable extension when a user drags and drops an image to a filesystem, potentially tricking the user into executing malicious code.
Recommendations For versions prior to 102, update to version 102 or later to resolve the issue. As a temporary workaround, consider avoiding dragging and dropping images to the filesystem until a patch is available. Restrict access to executable extensions to minimize the risk of exploitation.

استغلال

إصلاح

Unrestricted File Upload

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

ALT-PU-2022-2151
ALT-PU-2022-2458
ALT-PU-2022-2929
ALT-PU-2022-2930
ALT-PU-2023-1138
ALT-PU-2023-1139
ALT-PU-2023-4336
ALT-PU-2023-4339
BDU:2023-07558
CVE-2022-34483
OESA-2023-1673
OESA-2023-1674
OPENSUSE-SU-2022_3396-1
OPENSUSE-SU-2024:12184-1
OPENSUSE-SU-2024:14572-1
SUSE-SU-2022:3272-1
SUSE-SU-2022:3273-1
SUSE-SU-2022:3396-1
USN-5504-1

المنتجات المتأثرة

Alt Linux
Astra Linux
Linuxmint
Firefox
Suse
Ubuntu