CVE-2022-34471

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 102

Description The issue is related to errors in checking downloaded updates, potentially allowing a remote attacker to downgrade the browser version during an update. Specifically, when downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest. If the manifest had been tampered with on the server, an attacker could trick the browser into downgrading the addon to a prior version.

Recommendations For versions prior to 102, update to version 102 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially tampered manifests to minimize the risk of exploitation.