A malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>, controlling the redirect_uri, and through the Promise returned, obtain the Auth code and gain access to the user's account at the service provider. This vulnerability affects Firefox < 75.
Una extensión maliciosa podría haber llamado (code)browser.identity.launchWebAuthFlow(/code), controlando el redirect_uri y, por medio de la Promesa devuelta, obtenga el código de Autenticación y consiga acceso a la cuenta del usuario en el proveedor de servicios. Esta vulnerabilidad afecta a Firefox versiones anteriores a 75.
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, or execute arbitrary code. It was discovered that extensions could obtain auth codes from OAuth login flows in some circumstances. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit this to obtain access to the user's account. Various other issues were also addressed.
