QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2022-34471

Back to search

CVE-2022-34471

Published: Dec 22, 2022

Modified: Apr 15, 2025

PUBLISHED

Description

When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest. If the manifest had been tampered with on the server, an attacker could trick the browser into downgrading the addon to a prior version. This vulnerability affects Firefox < 102.

VendorProductVersions

Mozilla

Firefox

affected
unspecified - < 102

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now