Non notée
CVE-2023-29538 Under specific circumstances a WebExtension may have received a jar:file:/// URI instead of a moz-extension:/// URI…
Description
Under specific circumstances a WebExtension may have received a <code>jar:file:///</code> URI instead of a <code>moz-extension:///</code> URI during a load request. This leaked directory paths on the user's machine. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Firefox for Android 112 | premières → < 112 | 112 |
| Firefox 112 | premières → < 112 | 112 |
| Focus for Android 112 | premières → < 112 | 112 |
Références
- www.mozilla.org www.mozilla.org
- bugzilla.mozilla.org bugzilla.mozilla.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Firefox for Android
Les 33 CVE de Firefox for Android →
CVE-2024-8897
Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a…
6.1
Moyenne
CVE-2023-29546
When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden,…
6.5
Moyenne
CVE-2023-29534
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android
9.1
Critique
CVE-2023-25747
A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below…
7.5
Élevée