PT-2022-4983 · Mozilla+4 · Firefox+4
Jannis Rautenstrauch
·
Published
2022-07-26
·
Updated
2025-03-14
·
CVE-2022-36316
CVSS v2.0
6.4
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 103
Description
The issue is related to insufficient protection of internal data in the Firefox web browser. It allows a remote attacker to potentially gain unauthorized access to protected information. When using the Performance API, an attacker can notice subtle differences between PerformanceEntries, learning whether the target URL had been subject to a redirect.
Recommendations
For versions prior to 103, update to version 103 or later to resolve the issue. As a temporary workaround, consider restricting access to the Performance API until a patch is available.
Exploit
Fix
Open Redirect
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Firefox
Linuxmint
Ubuntu