Beveiligingsadvies

CVE-2024-4765

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-14 17:21:25
Laatst bijgewerkt 2024-08-29 20:28:35
Toegewezen door mozilla
CVSS-score 8.1
Status PUBLISHED

Beschrijving

Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another application's manifest. This could have been exploited to run arbitrary code in another application's context. *This issue only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 126.