{"id":169865,"date":"2026-04-23T18:24:28","date_gmt":"2026-04-23T16:24:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-api-indexeddb-pozvolyayushhaya-identificzirovat-polzovatelej-firefox-i-tor-browser"},"modified":"2026-04-23T18:24:28","modified_gmt":"2026-04-23T16:24:28","slug":"uyazvimost-v-api-indexeddb-pozvolyayushhaya-identificzirovat-polzovatelej-firefox-i-tor-browser","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-api-indexeddb-pozvolyayushhaya-identificzirovat-polzovatelej-firefox-i-tor-browser","title":{"rendered":"Sebezhet\u0151s\u00e9g az IndexedDB API-ban, amely lehet\u0151v\u00e9 teszi a Firefox \u00e9s Tor b\u00f6ng\u00e9sz\u0151k felhaszn\u00e1l\u00f3inak azonos\u00edt\u00e1s\u00e1t","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Gecko b\u00f6ng\u00e9sz\u0151motorban egy s\u00e9r\u00fcl\u00e9kenys\u00e9get (CVE-2026-6770) tal\u00e1ltak, amely lehet\u0151v\u00e9 teszi, hogy egy b\u00f6ng\u00e9sz\u0151b\u0151l k\u00fcl\u00f6nb\u00f6z\u0151 weboldalak megnyit\u00e1s\u00e1t nyomon k\u00f6vet\u0151 egyedi azonos\u00edt\u00f3kat hozzanak l\u00e9tre. A probl\u00e9ma minden Firefox-alap\u00fa b\u00f6ng\u00e9sz\u0151ben megjelenik, bele\u00e9rtve a Tor Browser-t is, \u00e9s m\u00e9g inkognit\u00f3 m\u00f3dban is m\u0171k\u00f6dik. Az azonos\u00edt\u00f3k az aktu\u00e1lis b\u00f6ng\u00e9sz\u0151folyamat keretein bel\u00fcl m\u0171k\u00f6dnek, \u00e9s a b\u00f6ng\u00e9sz\u0151 \u00fajraind\u00edt\u00e1sa ut\u00e1n t\u00f6rl\u0151dnek. A s\u00e9r\u00fcl\u00e9kenys\u00e9get a Firefox 150\/140.10.0 \u00e9s a Tor Browser 15.0.10 kiad\u00e1saiban jav\u00edtott\u00e1k. <\/p>\n

Az azonos\u00edt\u00f3 l\u00e9trehoz\u00e1s\u00e1hoz elegend\u0151, ha k\u00fcl\u00f6nb\u00f6z\u0151 oldalakon ugyanazt az IndexedDB adatb\u00e1zis-sorozatot hozzuk l\u00e9tre az API-n kereszt\u00fcl, majd \u00e9rt\u00e9kelj\u00fck az adatb\u00e1zisok sorrendj\u00e9t az indexedDB.databases() met\u00f3dus h\u00edv\u00e1s\u00e1nak eredm\u00e9nyek\u00e9nt. K\u00fcl\u00f6nb\u00f6z\u0151 b\u00f6ng\u00e9sz\u0151 p\u00e9ld\u00e1nyok eset\u00e9ben az adatb\u00e1zisok felsorol\u00e1si sorrendje elt\u00e9r\u0151 lesz, de egyazon p\u00e9ld\u00e1nyon bel\u00fcl meg fog ism\u00e9tl\u0151dni. Az ilyen sorrend a b\u00f6ng\u00e9sz\u0151 \u00fajraind\u00edt\u00e1s\u00e1ig megmarad, \u00e9s f\u00fcggetlen\u00fcl att\u00f3l, hogy melyik oldalt nyitjuk meg, reproduk\u00e1lhat\u00f3. <\/p>\n

P\u00e9ld\u00e1ul, ha az 'a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,r' nev\u0171 adatb\u00e1zist hozunk l\u00e9tre egy Firefox p\u00e9ld\u00e1nyban, az indexedDB.databases() met\u00f3dus mindig ezt fogja visszaadni: 'g,c,p,a,l,f,n,r,d,j,b,o,h,e,m,i,k', m\u00edg egy m\u00e1sik p\u00e9ld\u00e1nyban 'j,b,o,h,e,m,i,k,f,n,r,d,g,c,p,a,l' eredm\u00e9nyt kaphatunk. 16 adatb\u00e1zis l\u00e9trehoz\u00e1s\u00e1val k\u00f6r\u00fclbel\u00fcl 44 bitnyi entr\u00f3pi\u00e1t nyerhet\u00fcnk az azonos\u00edt\u00e1s \u00e9rdek\u00e9ben. Az azonos\u00edt\u00f3 gener\u00e1l\u00e1s\u00e1ra nincs hat\u00e1ssal a helyi b\u00f6ng\u00e9sz\u0151 t\u00e1rol\u00f3k t\u00f6rl\u00e9se \u00e9s a Tor b\u00f6ng\u00e9sz\u0151 'New Identity' gombj\u00e1val t\u00f6rt\u00e9n\u0151 Tor-csom\u00f3pont l\u00e1nc friss\u00edt\u00e9se. A met\u00f3dust arra is haszn\u00e1lhatjuk, hogy a priv\u00e1t b\u00f6ng\u00e9sz\u00e9si ablakban azonos\u00edtsuk a felhaszn\u00e1l\u00f3kat. <\/p>\n

A s\u00e9r\u00fcl\u00e9kenys\u00e9g az IndexedDB API megval\u00f3s\u00edt\u00e1s\u00e1nak saj\u00e1toss\u00e1gaib\u00f3l ered, amelyben az adatb\u00e1zisok sorrendj\u00e9t a bels\u0151 strukt\u00far\u00e1k elrendez\u00e9se befoly\u00e1solja, ami minden b\u00f6ng\u00e9sz\u0151folyamat p\u00e9ld\u00e1ny\u00e1ra specifikus. Az indexedDB.databases() met\u00f3dus \u00e1ltal visszaadott adatb\u00e1zislista elemeinek sorrendje nem az adatb\u00e1zisok neveit\u0151l vagy azok l\u00e9trehoz\u00e1si sorrendj\u00e9t\u0151l f\u00fcgg, hanem az adatb\u00e1zisokat t\u00e1rol\u00f3 f\u00e1jlokhoz kapcsol\u00f3d\u00f3 bels\u0151 UUID-hashek glob\u00e1lis hash-t\u00e1bl\u00e1zatban val\u00f3 elhelyez\u00e9s\u00e9t\u0151l.
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u043e\u043c \u0434\u0432\u0438\u0436\u043a\u0435 Gecko \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-6770), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u0437 \u043e\u0434\u043d\u043e\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u043e \u0432\u0441\u0435\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Firefox, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Tor Browser, \u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0434\u0430\u0436\u0435 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430. \u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u0441\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 Firefox 150\/140.10.0 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-169865","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47S\u00e9r\u00fcl\u00e9kenys\u00e9g az IndexedDB API-ban, amely lehet\u0151v\u00e9 teszi a Firefox \u00e9s a Tor Browser felhaszn\u00e1l\u00f3inak azonos\u00edt\u00e1s\u00e1t | ProHoster","description":"A Gecko b\u00f6ng\u00e9sz\u0151motorban egy s\u00e9r\u00fcl\u00e9kenys\u00e9get (CVE-2026-6770) tal\u00e1ltak, amely lehet\u0151v\u00e9 teszi, hogy egy b\u00f6ng\u00e9sz\u0151b\u0151l k\u00fcl\u00f6nb\u00f6z\u0151 weboldalak megnyit\u00e1s\u00e1t nyomon k\u00f6vet\u0151 egyedi azonos\u00edt\u00f3kat hozzanak l\u00e9tre.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-api-indexeddb-pozvolyayushhaya-identificzirovat-polzovatelej-firefox-i-tor-browser","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 API IndexedDB, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Firefox \u0438 Tor Browser | ProHoster","og:description":"\u0412 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u043e\u043c \u0434\u0432\u0438\u0436\u043a\u0435 Gecko \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-6770), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u0437 \u043e\u0434\u043d\u043e\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-api-indexeddb-pozvolyayushhaya-identificzirovat-polzovatelej-firefox-i-tor-browser","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-23T16:24:28+00:00","article:modified_time":"2026-04-23T16:24:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/169865","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=169865"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/169865\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=169865"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=169865"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=169865"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}