CLEANSTART-2024-TA44375

Dashboard / Vulnerabilities / CLEANSTART-2024-TA44375

CLEANSTART-2024-TA44375

Summary: When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect

Details: Security vulnerability affects the firefox package. When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect.

References: https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2024/CLEANSTART-2024-TA44375.json, https://osv.dev/vulnerability/CVE-2022-36316, https://nvd.nist.gov/vuln/detail/CVE-2022-36316