Improper Verification of Source of a Communication Channel Affecting Firefox package, versions [0,]
Threat Intelligence
Exploit Maturity
Snyk has a proof-of-concept or detailed explanation of how to exploit this vulnerability.
Proof of concept
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-UNMANAGED-FIREFOX-7707875
- published19 Aug 2024
- disclosed18 Aug 2024
- creditWilliam Entriken
Introduced: 18 Aug 2024
CVE NOT AVAILABLE CWE-940 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
There is no fixed version for Firefox.
Overview
Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel when the website contains http://location.search||fetch(0).then(a=>location='?x');. This vulnerability prevents visitors from navigating back away from the website.
NOTE: This vulnerability impacts macOS environments.