CVE-2022-28283 — Files or Directories Accessible to External Parties in Mozilla Firefox
Severity
6.5MEDIUMNVD
GHSA9.8
EPSS
0.3%
top 44.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 22
Description
The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include local files or other files that should have been inaccessible. This vulnerability affects Firefox < 99.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6
Affected Packages6 packages
🔴Vulnerability Details
4GHSA▶
GHSA-vcmf-vf48-7jqp: The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include local files or other files th↗2022-12-22
OSV▶
CVE-2022-28283: The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include local files or other files th↗2022-04-07