VULNERABILITY INTELLIGENCE

CVE-2022-31746

CVSS score6.5 MEDIUM

EPSS probability0.44%

CISA KEVNot currently listed

Published2022-12-22

Last modified2026-08-19

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header. This vulnerability affects Firefox for iOS < 102.

Weakness classification

nvd@nist.gov: CWE-200
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-200

Primary references

security@mozilla.org — Issue Tracking
security@mozilla.org — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Issue Tracking