The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include local files or other files that should have been inaccessible. This vulnerability affects Firefox < 99.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-firefoxalpine-linux-upgrade-librewolf | Aug 22, 2024 | Dec 22, 2022 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Dec 22, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-www-client-firefoxgentoo-linux-upgrade-www-client-firefox-bin | Aug 11, 2022 | Aug 10, 2022 | |
| Mfsa2022 13 | mozilla-firefox-upgrade-99_0 | Apr 6, 2022 | Apr 5, 2022 | |
| Ubuntu | ubuntu-upgrade-firefox | Apr 8, 2022 | Apr 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub