Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34205
HistoryFeb 14, 2022 - 9:43 a.m.

Directory Traversal

2022-02-1409:43:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
firefox
vulnerability
time-of-check
maintenance service
updater
windows
write access
arbitrary directory
operating systems

EPSS

0.002

Percentile

58.0%

firefox is vulnerable to directory traversal. The vulnerability exists due to a Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write access to an arbitrary directory. This bug only affects Firefox on Windows. Other operating systems are unaffected.