Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-29538
HistoryJun 02, 2023 - 5:15 p.m.

Cross site request forgery (csrf)

2023-06-0217:15:00
PRIOn knowledge base
www.prio-n.com
2
cross site request forgery
webextension
directory paths leakage

5.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.6%

Under specific circumstances a WebExtension may have received a <code>jar:file:///</code> URI instead of a <code>moz-extension:///</code> URI during a load request. This leaked directory paths on the user’s machine. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

CPENameOperatorVersion
firefoxlt112.0
firefoxlt112.0
focuslt112.0

5.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.6%