Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38985
HistoryJan 24, 2023 - 7:52 p.m.

Arbitrary File Read

2023-01-2419:52:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
arbitrary file read
firefox
vulnerability
software
web security
exploitprimitive

0.001 Low

EPSS

Percentile

50.9%

firefox is vulnerable to arbitrary file read. A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the file:// context. Given a reliable exploit primitive, this new process could be exploited again leading to an arbitrary file read.