Rewterz Threat Advisory – Multiple Jenkins Delete log Plugin Vulnerabilities
November 16, 2022Rewterz Threat Alert – Kimsuky APT Group – Active IOCs
November 16, 2022Rewterz Threat Advisory – Multiple Jenkins Delete log Plugin Vulnerabilities
November 16, 2022Rewterz Threat Alert – Kimsuky APT Group – Active IOCs
November 16, 2022Severity
Medium
Analysis Summary
CVE-2022-45403
Mozilla could allow a remote attacker to obtain sensitive information, caused by a flaw in the Service Workers comonent. By persuading a victim to visit a specially-crafted Web site, an attacker could exploit this vulnerability to determine the presence or length of a media file, and use this information to launch further attacks against the affected system.
Impact
- Information Disclosure
Indicators Of Compromise
CVE
- CVE-2022-45403
Affected Vendors
Mozilla
Affected Products
Mozilla Firefox 106
Remediation
Refer to Mozilla Foundation Security Advisory for patch, upgrade or suggested workaround information.