PT-2022-3564 · Mozilla+4 · Firefox+4
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 100
Description
The Performance API in Firefox did not properly hide whether a request for a cross-origin resource has observed redirects, leading to a potential information disclosure. This issue may allow a remote attacker to gain unauthorized access to protected information.
Recommendations
For versions prior to 100, update to version 100 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information until the update is applied.
Exploit
Fix
DoS
Origin Validation Error
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Firefox
Linuxmint
Ubuntu