CLEANSTART-2024-IT24961

Dashboard / Vulnerabilities / CLEANSTART-2024-IT24961

CLEANSTART-2024-IT24961

Summary: When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect

Details: Security vulnerability affects the librewolf package. When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect.

References: https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2024/CLEANSTART-2024-IT24961.json, https://osv.dev/vulnerability/CVE-2022-36316, https://nvd.nist.gov/vuln/detail/CVE-2022-36316