CVE-2022-28283: 
NixOS vulnerability analysis and mitigation

CVE-2022-28283 is a security vulnerability discovered in Firefox's devtools sourceMapURL feature. The vulnerability was reported by Gijs and disclosed on April 5, 2022, affecting Firefox versions prior to 99. The sourceMapURL feature in devtools lacked proper security checks, which could allow webpages to access local files or other files that should have been inaccessible (Mozilla Advisory).

The vulnerability stemmed from missing security checks in the devtools' sourceMapURL feature implementation. The issue allowed webpages to potentially include local files or other restricted files through the sourceMap functionality. The vulnerability was rated as having moderate severity impact according to Mozilla's security assessment (Mozilla Advisory).

The vulnerability could allow malicious websites to attempt accessing local files or other files that should have been inaccessible through the sourceMapURL feature. This could potentially lead to information disclosure or access to sensitive files on the system (Mozilla Advisory, Ubuntu Notice).

The vulnerability was fixed in Firefox 99 by implementing proper security checks that prevent access to chrome and resource protocols for sourcemap helper. Users should upgrade to Firefox 99 or later to receive the security fix (Mozilla Advisory).