Thursday, February 10, 2022

MFSA2022-05 Firefox: Security Vulnerabilities fixed in Firefox ESR 91.6 (CVE-2022-22754)

rapid7 vulnerabilities In: rapid7, vulnerabilities

Description
If a user installed an extension of a particular type, the extension could have auto-updated itself and while doing so, bypass the prompt which grants the new version the new requested permissions.
Solution(s)
mozilla-firefox-esr-upgrade-91_6


Referenceshttps://attackerkb.com/topics/cve-2022-22754
CVE - 2022-22754
http://www.mozilla.org/security/announce/2022/mfsa2022-05.html