PT-2021-23861 · Mozilla+4 · Firefox+4

Jake Heath · Publicado 2021-12-07 · Atualizado 2024-12-12 · CVE-2021-43540

Positive Technologies (AI Summary) · Pt

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Nome do software vulnerável e versões afetadas

Versões do Firefox anteriores à 95

Descrição

A falha permite que extensões WebExtensions com as permissões corretas criem e instalem ServiceWorkers para sites de terceiros. Esses ServiceWorkers não seriam desinstalados quando a extensão fosse removida.

Recomendações

Para versões anteriores à 95, atualize para a versão 95 ou posterior para resolver o problema.

Exploit

Correção

Identificadores relacionados

ALT-PU-2021-3496

ALT-PU-2021-3576

ALT-PU-2022-2458

ALT-PU-2022-2929

ALT-PU-2023-1138

ALT-PU-2023-1139

ALT-PU-2023-4336

ALT-PU-2023-4339

CVE-2021-43540

OESA-2023-1673

OESA-2023-1674

OPENSUSE-SU-2024:11669-1

OPENSUSE-SU-2024:14572-1

USN-5186-1

USN-5186-2

Produtos afetados

Alt Linux

Astra Linux

Firefox

Linuxmint

Ubuntu

Referências · 2185

• 🔥 https://github.com/mistymntncop/CVE-2022-1802 · Exploit
• 🔥 https://github.com/0vercl0k/CVE-2022-28281 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-26485 · Exploit
• 🔥❌ https://github.com/MagicPwnrin/CVE-2022-28282 · Exploit, Deleted
• 🔥❌ https://github.com/Pwnrin/CVE-2022-28282 · Exploit, Deleted
• https://suse.com/security/cve/CVE-2024-2615 · Nota
• https://suse.com/security/cve/CVE-2022-38477 · Nota
• https://suse.com/security/cve/CVE-2022-28282 · Nota
• https://suse.com/security/cve/CVE-2020-35111 · Nota
• https://suse.com/security/cve/CVE-2017-5435 · Nota
• https://suse.com/security/cve/CVE-2024-6614 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-29535 · Nota de Segurança
• https://suse.com/security/cve/CVE-2023-29535 · Nota
• https://suse.com/security/cve/CVE-2012-5836 · Nota
• https://suse.com/security/cve/CVE-2013-1714 · Nota