vulnerability

MFSA2022-24 Firefox: Security Vulnerabilities fixed in Firefox 102 (CVE-2022-34477)

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:C/I:N/A:N)
Published
Jun 28, 2022
Added
Jun 29, 2022
Modified
Jan 28, 2025

Description

The MediaError message property should be consistent to avoid leaking information about cross-origin resources; however for a same-site cross-origin resource, the message could have leaked information enabling XS-Leaks attacks. This vulnerability affects Firefox

Solution

mozilla-firefox-upgrade-102_0
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.