PT-2022-7522 · Mozilla+4 · Firefox+4

Kagami

·

Published

2022-10-10

·

Updated

2025-03-14

·

CVE-2022-45417

CVSS v2.0

5.0

Medium

VectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 107
Description The issue is related to Service Workers not detecting Private Browsing Mode correctly in all cases. This could have led to Service Workers being written to disk for websites visited in Private Browsing Mode, potentially leaking Private Browsing Mode details to disk.
Recommendations For versions prior to 107, update to version 107 or later to resolve the issue. As a temporary workaround, consider restricting the use of Service Workers in Private Browsing Mode to minimize the risk of exploitation.

Exploit

Fix

Clickjacking

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-1021

Related Identifiers

ALT-PU-2022-3090
ALT-PU-2022-3270
ALT-PU-2023-5754
ALT-PU-2023-6436
ALT-PU-2024-3614
BDU:2024-06948
CVE-2022-45417
OESA-2025-1265
OESA-2025-1268
OPENSUSE-SU-2024:12518-1
OPENSUSE-SU-2024:14572-1
USN-5726-1

Affected Products

Alt Linux
Astra Linux
Firefox
Linuxmint
Ubuntu