CLEANSTART-2024-IR54618

Dashboard / Vulnerabilities / CLEANSTART-2024-IR54618

CLEANSTART-2024-IR54618

Summary: vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed

Details: Security vulnerability affects the firefox-esr package. A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed.

References: https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2024/CLEANSTART-2024-IR54618.json, https://osv.dev/vulnerability/CVE-2019-11730, https://nvd.nist.gov/vuln/detail/CVE-2019-11730