Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-4c26-fxtu-y3gd
SummaryService Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media combined with Range requests might have allowed them to determine the presence or length of a media file.
Aliases
0
alias CVE-2022-45403
Fixed_packages
0
url pkg:mozilla/Firefox@107.0.0
purl pkg:mozilla/Firefox@107.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@107.0.0
1
url pkg:mozilla/Firefox%20ESR@102.5.0
purl pkg:mozilla/Firefox%20ESR@102.5.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox%2520ESR@102.5.0
2
url pkg:mozilla/Thunderbird@102.5.0
purl pkg:mozilla/Thunderbird@102.5.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Thunderbird@102.5.0
Affected_packages
References
0
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-47
reference_id mfsa2022-47
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-47
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-48
reference_id mfsa2022-48
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-48
2
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-49
reference_id mfsa2022-49
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-49
Weaknesses
Exploits
Severity_range_score7.0 - 8.9
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-4c26-fxtu-y3gd