Threats tagged 'ghsa-2h3c-qrcw-962q'

A vulnerability in the WebCompat WebExtension shipped with Firefox allowed an attacker who enumerated its resources to obtain a persistent UUID that identified the browser. This UUID persisted across container tabs and normal/private browsing modes but did not persist across different Firefox profiles. The issue affects Firefox versions prior to 140 and Firefox ESR versions prior to 115.25 and 128.12. The vulnerability has a moderate impact and a CVSS score of 4.3. It was fixed in Firefox 140 and Firefox ESR 115.25.