Lucene search
Veracode Vulnerability DatabaseVERACODE:40217HistoryApr 20, 2023 - 9:38 a.m.
Open Redirect
2023-04-2009:38:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
22
firefox
open redirect
vulnerability
sourcemappingurlurls
sandboxed iframes
allow-top-navigation-to-custom-protocols
EPSS
0.001
Percentile
36.5%
firefox is vulnerable to Open Redirect. The vulnerability exists when a redirect embedded into sourceMappingUrls could allow navigation to external protocol links in sandboxed iframes without allow-top-navigation-to-custom-protocols.
Affected configurations
Node
-firefox\Matchfocal83.0+build2-0ubuntu0.20.04.1
OR-firefox\Matchfocal75.0+build3-0ubuntu1
OR-firefox\Matchfocal80.0.1+build1-0ubuntu0.20.04.1
OR-firefox\Matchfocal80.0+build2-0ubuntu0.20.04.1
OR-firefox\Matchbionic80.0.1+build1-0ubuntu0.18.04.1
OR-firefox\Matchbionic59.0.2+build1-0ubuntu1
OR-firefox\Matchbionic92.0+build3-0ubuntu0.18.04.1
OR-firefox\Matchbionic80.0+build2-0ubuntu0.18.04.1
OR-firefox\Matchbionic83.0+build2-0ubuntu0.18.04.2
OR-firefox\Matchsid83.0-1
OR-firefox\Matchsid82.0.3-1
OR-firefox\Matchsid81.0-2
OR-firefox\Matchfocal83.0+build2-0ubuntu0.20.04.1
OR-firefox\Matchfocal75.0+build3-0ubuntu1
OR-firefox\Matchfocal80.0.1+build1-0ubuntu0.20.04.1
OR-firefox\Matchfocal80.0+build2-0ubuntu0.20.04.1
OR-firefox\Matchbionic80.0.1+build1-0ubuntu0.18.04.1
OR-firefox\Matchbionic59.0.2+build1-0ubuntu1
OR-firefox\Matchbionic92.0+build3-0ubuntu0.18.04.1
OR-firefox\Matchbionic80.0+build2-0ubuntu0.18.04.1
OR-firefox\Matchbionic83.0+build2-0ubuntu0.18.04.2
OR-firefox\Matchsid83.0-1
OR-firefox\Matchsid82.0.3-1
OR-firefox\Matchsid81.0-2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| - | firefox\ | focal | cpe:2.3:a:-:firefox\:focal:83.0+build2-0ubuntu0.20.04.1:*:*:*:*:*:*:* |
| - | firefox\ | focal | cpe:2.3:a:-:firefox\:focal:75.0+build3-0ubuntu1:*:*:*:*:*:*:* |
| - | firefox\ | focal | cpe:2.3:a:-:firefox\:focal:80.0.1+build1-0ubuntu0.20.04.1:*:*:*:*:*:*:* |
| - | firefox\ | focal | cpe:2.3:a:-:firefox\:focal:80.0+build2-0ubuntu0.20.04.1:*:*:*:*:*:*:* |
| - | firefox\ | bionic | cpe:2.3:a:-:firefox\:bionic:80.0.1+build1-0ubuntu0.18.04.1:*:*:*:*:*:*:* |
| - | firefox\ | bionic | cpe:2.3:a:-:firefox\:bionic:59.0.2+build1-0ubuntu1:*:*:*:*:*:*:* |
| - | firefox\ | bionic | cpe:2.3:a:-:firefox\:bionic:92.0+build3-0ubuntu0.18.04.1:*:*:*:*:*:*:* |
| - | firefox\ | bionic | cpe:2.3:a:-:firefox\:bionic:80.0+build2-0ubuntu0.18.04.1:*:*:*:*:*:*:* |
| - | firefox\ | bionic | cpe:2.3:a:-:firefox\:bionic:83.0+build2-0ubuntu0.18.04.2:*:*:*:*:*:*:* |
| - | firefox\ | sid | cpe:2.3:a:-:firefox\:sid:83.0-1:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2023-29540
2023-04-12 00:00:00
cve
cve
CVE-2023-29540
2023-06-02 17:15:12
prion
prion
Code injection
2023-06-02 17:15:00
debiancve
debiancve
CVE-2023-29540
2023-06-02 17:15:12
cvelist
cvelist
CVE-2023-29540
2023-06-02 00:00:00
nvd
nvd
CVE-2023-29540
2023-06-02 17:15:12
ubuntu
ubuntu
Firefox regressions
2023-04-18 00:00:00
Firefox regressions
2023-04-26 00:00:00
Firefox vulnerabilities
2023-04-12 00:00:00
osv
osv
firefox regressions
2023-04-26 04:15:36
firefox regressions
2023-04-18 04:16:43
firefox vulnerabilities
2023-04-12 06:47:31
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-6010-1)
2023-04-12 00:00:00
Fedora 36 : firefox (2023-50f9eb7aca)
2023-04-15 00:00:00
Fedora 38 : firefox (2023-07c1537955)
2023-04-15 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6010-2)
2023-04-18 00:00:00
Ubuntu: Security Advisory (USN-6010-1)
2023-04-13 00:00:00
Ubuntu: Security Advisory (USN-6010-3)
2023-04-27 00:00:00
kaspersky
kaspersky
KLA48839 Multiple vulnerabilities in Mozilla Firefox
2023-04-11 00:00:00
mozilla
mozilla
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2023-05-30 00:00:00