ALT-PU-2023-1156

Низкий

ALT-PU-2023-1156: package firefox-ublock_origin update to version 1.46.0-alt1

Источник

errata.altlinux.org

Дата публикации

31.01.2023

Дата обновления

31.01.2023

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades firefox-ublock_origin to version 1.46.0-alt1.

Устраненные уязвимости1

CVE-2022-32308

Средний 6.1

Дата публикации: 13.07.2022

CWE-79

Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process.

CVSS 3.1

Средний 6.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: Required
Scope: Changed
Confidentiality: Low
Integrity: Low
Availability: None

Ссылки

CVE-2022-32308 https://nvd.nist.gov/vuln/detail/CVE-2022-32308

Ссылки1

ALT-PU-2023-1156 https://errata.altlinux.org/ALT-PU-2023-1156

Связанные уязвимости

CVE-2022-32308

CVSS3: 6.1

ubuntu

больше 4 лет назад

Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process.

CVE-2022-32308

CVSS3: 6.1

nvd

больше 4 лет назад

Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process.

CVE-2022-32308

CVSS3: 6.1

debian

больше 4 лет назад

Cross Site Scripting (XSS) vulnerability in uBlock Origin extension be ...

GHSA-756h-ggr3-6vcj

CVSS3: 6.1

github

больше 4 лет назад

Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process.