What is GHSA-2pmg-xgx9-g8w8?

GHSA-2pmg-xgx9-g8w8 is a security advisory published by GitHub Security Advisories with Critical severity. An attacker could have accessed internal pages or data by ex-filtrating a security key from...

Which CVE IDs does GHSA-2pmg-xgx9-g8w8 cover?

GHSA-2pmg-xgx9-g8w8 covers the following CVE IDs: CVE-2023-49060. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2pmg-xgx9-g8w8?

GHSA-2pmg-xgx9-g8w8 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-2pmg-xgx9-g8w8CriticalCVSS 9.8

An attacker could have accessed internal pages or data by ex-filtrating a security key from...

Vendor

GitHub Security Advisories

Published

November 21, 2023

Last Modified

August 19, 2026

🔗 CVE IDs covered (1)

CVE-2023-49060 →

📋 Description

An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the referrerpolicy attribute. This vulnerability affects Firefox for iOS < 120.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2023-49060
https://bugzilla.mozilla.org/show_bug.cgi?id=1861405
https://www.mozilla.org/security/advisories/mfsa2023-51
https://github.com/advisories/GHSA-2pmg-xgx9-g8w8