Thursday, February 10, 2022

MFSA2022-04 Firefox: Security Vulnerabilities fixed in Firefox 97 (CVE-2022-22754)

rapid7 vulnerabilities In: rapid7, vulnerabilities

Description
If a user installed an extension of a particular type, the extension could have auto-updated itself and while doing so, bypass the prompt which grants the new version the new requested permissions.
Solution(s)
mozilla-firefox-upgrade-97_0


Referenceshttps://attackerkb.com/topics/cve-2022-22754
CVE - 2022-22754
http://www.mozilla.org/security/announce/2022/mfsa2022-04.html