Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-17317
HistoryFeb 20, 2023 - 12:00 a.m.

Mozilla PollBot open redirect vulnerability

2023-02-2000:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
mozilla
pollbot
open redirect
vulnerability
microservice
firefox
releases
mozilla foundation

0.001 Low

EPSS

Percentile

27.3%

Mozilla PollBot is a microservice from the Mozilla Foundation. Freeing humans from the onerous task of polling for status during Firefox releases, Mozilla PollBot versions prior to 1.4.6 have an open redirect vulnerability that stems from the system not doing a reasonable job of targeting jumps, which an attacker could use to redirect anyone to a malicious site.

CPENameOperatorVersion
mozilla mozilla pollbotlt1.4.6

0.001 Low

EPSS

Percentile

27.3%