Lucene search
HistoryDec 22, 2022 - 8:15 p.m.
CVE-2022-28283
firefox
sourcemapurl
local file inclusion
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
57.2%
The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include local files or other files that should have been inaccessible. This vulnerability affects Firefox < 99.
Affected configurations
Node
mozillafirefoxRange<99.0
Related
debiancve
debiancve
CVE-2022-28283
2022-12-22 20:15:23
ubuntucve
ubuntucve
CVE-2022-28283
2022-04-07 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2022-04-09 22:44:04
cve
cve
CVE-2022-28283
2022-12-22 20:15:23
cnvd
cnvd
Mozilla Firefox Security Feature Issue Vulnerability (CNVD-2023-05206)
2023-01-04 00:00:00
prion
prion
Design/Logic Flaw
2022-12-22 20:15:00
cvelist
cvelist
CVE-2022-28283
2022-12-22 00:00:00
alpinelinux
alpinelinux
CVE-2022-28283
2022-12-22 20:15:23
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2022-13) - Windows
2022-07-07 00:00:00
Mozilla Firefox Security Advisory (MFSA2022-13) - Mac OS X
2022-07-07 00:00:00
Ubuntu: Security Advisory (USN-5370-1)
2022-04-08 00:00:00
nessus
nessus
Mozilla Firefox < 99.0
2022-04-05 00:00:00
Mozilla Firefox < 99.0
2022-04-05 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5370-1)
2022-04-07 00:00:00
osv
osv
firefox vulnerabilities
2022-04-07 21:05:42
kaspersky
kaspersky
KLA12496 Multiple vulnerabilities in Mozilla Firefox
2022-04-05 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2022-04-07 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 99 — Mozilla
2022-04-05 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2022-08-10 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
57.2%
Related for NVD:CVE-2022-28283