{
  "cveId": "CVE-2022-34471",
  "url": "https://patchblox.com/security/cve/CVE-2022-34471",
  "summary": "CVE-2022-34471 is fixed in 5 products on 2 platforms, first by Mozilla Firefox ESR (en-US) 102.0, released June 23, 2022. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Mozilla Firefox and 2 others: Insufficient Verification of Data Authenticity",
  "description": "When downloading an update for an addon, the downloaded addon update\u0027s version was not verified to match the version selected from the manifest. If the manifest had been tampered with on the server, an attacker could trick the browser into downgrading the addon to a prior version. This vulnerability affects Firefox \u003C 102.",
  "published": "2022-07-04T17:00:00Z",
  "severity": "Medium",
  "cvss": 6.5,
  "cwe": "CWE-345: Insufficient Verification of Data Authenticity",
  "epss": 0.00251,
  "epssPercentile": 0.1654,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2022-34471",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox (en-US)",
      "fixedVersion": "102.0",
      "fix": "Mozilla Firefox (en-US) 102.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox-102.0",
      "released": "2022-06-27T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox ESR (en-US)",
      "fixedVersion": "102.0",
      "fix": "Mozilla Firefox ESR (en-US) 102.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-102.0",
      "released": "2022-06-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "102.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox 102.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-102.0-build2-0ubuntu0.18.04.1",
      "released": "2022-07-04T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "102.0\u002Bbuild2-0ubuntu0.20.04.1",
      "fix": "firefox 102.0\u002Bbuild2-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-102.0-build2-0ubuntu0.20.04.1",
      "released": "2022-07-04T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "102.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox-geckodriver 102.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-geckodriver-102.0-build2-0ubuntu0.18.04.1",
      "released": "2022-07-04T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "102.0\u002Bbuild2-0ubuntu0.20.04.1",
      "fix": "firefox-geckodriver 102.0\u002Bbuild2-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-geckodriver-102.0-build2-0ubuntu0.20.04.1",
      "released": "2022-07-04T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "102.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox-mozsymbols 102.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-102.0-build2-0ubuntu0.18.04.1",
      "released": "2022-07-04T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "102.0\u002Bbuild2-0ubuntu0.20.04.1",
      "fix": "firefox-mozsymbols 102.0\u002Bbuild2-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-mozsymbols-102.0-build2-0ubuntu0.20.04.1",
      "released": "2022-07-04T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}