CVE-2022-45419
If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certificate, and then deleted the exception,…
Published: 2022-12-22 · CVSS: 6.5 · CVSS 3.1
If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certificate, and then deleted the exception, Firefox would have kept the connection alive, making it seem like the certificate was still trusted. This vulnerability affects Firefox < 107.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7