CVE-2022-29915: Medium severity Mozilla Firefox vulnerability
The Performance API did not properly hide the fact whether a request cross-origin resource has observed redirects.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 100 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 100 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 100.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 100.0-r0
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2022-29915?
CVE-2022-29915 is considered a medium severity vulnerability affecting versions of Firefox prior to 100.
How do I fix CVE-2022-29915?
To fix CVE-2022-29915, update Firefox to version 100 or later.
What impact does CVE-2022-29915 have on users?
CVE-2022-29915 could potentially expose redirect information from cross-origin requests in Firefox.
Which versions of Firefox are affected by CVE-2022-29915?
CVE-2022-29915 affects all versions of Firefox prior to version 100.
Is CVE-2022-29915 a persistent vulnerability?
CVE-2022-29915 is not a persistent vulnerability but can be exploited during web interactions until the software is updated.