If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certificate, and then deleted the exception, Firefox would have kept the connection alive, making it seem like the certificate was still trusted. This vulnerability affects Firefox < 107.
| Reporter | Title | Published | Views | Family All 43 |
|---|---|---|---|---|
 | Astra Linux – Vulnerability in Firefox | 14 Sep 202612:41 | – | astralinux |
 | Firefox TLS Certificate Validation | 13 Sep 202400:00 | – | bdu_fstec |
 | Mozilla Firefox Trust Management Vulnerability | 15 Nov 202200:00 | – | cnnvd |
 | Mozilla Firefox Trust Management Issue Vulnerability (CNVD-2023-15815) | 21 Nov 202200:00 | – | cnvd |
 | CVE-2022-45419 | 22 Dec 202200:00 | – | cve |
 | CVE-2022-45419 | 22 Dec 202200:00 | – | cvelist |
 | CVE-2022-45419 | 22 Dec 202200:00 | – | debiancve |
 | EUVD-2022-48291 | 3 Oct 202520:07 | – | euvd |
 | GLSA-202211-06 : Mozilla Firefox: Multiple Vulnerabilities | 22 Nov 202200:00 | – | nessus |
| Mozilla Firefox < 107.0 | 16 Nov 202200:00 | – | nessus |
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
03 Sep 2025 21:48Current
7High risk
Vulners AI Score7
CVSS 3.16.5
EPSS0.00394
SSVC