CVE-2022-45417 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-45417 Interim 1 3 2023-01-06T00:41:35Z current 2022-11-18T00:44:04Z 2023-01-06T00:41:35Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-45417 Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Server for SAP Applications 12 SP5 openSUSE Tumbleweed MozillaFirefox MozillaFirefox-107.0-1.1 MozillaFirefox-branding-upstream-107.0-1.1 MozillaFirefox-devel-107.0-1.1 MozillaFirefox-translations-common-107.0-1.1 MozillaFirefox-translations-other-107.0-1.1 MozillaFirefox-107.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-branding-upstream-107.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-devel-107.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-translations-common-107.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-translations-other-107.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107. CVE-2022-45417 openSUSE Tumbleweed:MozillaFirefox-107.0-1.1 openSUSE Tumbleweed:MozillaFirefox-branding-upstream-107.0-1.1 openSUSE Tumbleweed:MozillaFirefox-devel-107.0-1.1 openSUSE Tumbleweed:MozillaFirefox-translations-common-107.0-1.1 openSUSE Tumbleweed:MozillaFirefox-translations-other-107.0-1.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox critical 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N