Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:26960
HistorySep 21, 2020 - 6:27 a.m.

Privilege Escalation

2020-09-2106:27:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16

0.002 Low

EPSS

Percentile

64.6%

firefox is vulnerable to privilege escalation. A malicious extension is able to call browser.identity.launchWebAuthFlow and control the redirect_uri. Subsequently, the Auth code can be retrieved and access to user’s account is obtained.