Threats tagged 'ghsa-2776-h8x3-vrr7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.4	CVE-2025-0237The WebChannel API, which is used to transport various information across processes, did not check the sending Medium5.42025-01-07GCVE DatabaseCVE-2025-0237 The WebChannel API in Firefox versions prior to 134 and Firefox ESR prior to 128.6 did not verify the sending principal, accepting the principal as provided. This flaw could allow privilege escalation via a confused deputy attack. The vulnerability has a moderate severity rating and was addressed in Firefox 134 and Firefox ESR 128.6. Report on CVE-2025-0237 Vulnerability CWE-863 #ghsa-2776-h8x3-vrr7	GCVE Database	2025-01-07

Page 1 of 1