Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-28283HistoryDec 22, 2022 - 8:15 p.m.
CVE-2022-28283
2022-12-2220:15:23
Debian Security Bug Tracker
security-tracker.debian.org
35
security checks
local files
inaccessible
firefox
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
57.2%
The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include local files or other files that should have been inaccessible. This vulnerability affects Firefox < 99.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 99.0-1 | firefox_99.0-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2022-28283
2022-04-07 00:00:00
nvd
nvd
CVE-2022-28283
2022-12-22 20:15:23
veracode
veracode
Cross-Site Scripting (XSS)
2022-04-09 22:44:04
cve
cve
CVE-2022-28283
2022-12-22 20:15:23
cnvd
cnvd
Mozilla Firefox Security Feature Issue Vulnerability (CNVD-2023-05206)
2023-01-04 00:00:00
prion
prion
Design/Logic Flaw
2022-12-22 20:15:00
cvelist
cvelist
CVE-2022-28283
2022-12-22 00:00:00
alpinelinux
alpinelinux
CVE-2022-28283
2022-12-22 20:15:23
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2022-13) - Windows
2022-07-07 00:00:00
Mozilla Firefox Security Advisory (MFSA2022-13) - Linux
2022-04-27 00:00:00
Mozilla Firefox Security Advisory (MFSA2022-13) - Mac OS X
2022-07-07 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 99 — Mozilla
2022-04-05 00:00:00
nessus
nessus
Mozilla Firefox < 99.0
2022-04-05 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5370-1)
2022-04-07 00:00:00
Mozilla Firefox < 99.0
2022-04-05 00:00:00
osv
osv
firefox vulnerabilities
2022-04-07 21:05:42
kaspersky
kaspersky
KLA12496 Multiple vulnerabilities in Mozilla Firefox
2022-04-05 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2022-04-07 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2022-08-10 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
57.2%
Related for DEBIANCVE:CVE-2022-28283