CVE-2021-23974

Опубликовано: 26 фев. 2021

Источник: debian

Описание

The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerability affects Firefox < 86.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
firefox	fixed	86.0-1		package

Примечания

https://www.mozilla.org/en-US/security/advisories/mfsa2021-07/#CVE-2021-23974

Связанные уязвимости

CVE-2021-23974

CVSS3: 6.1

ubuntu

больше 4 лет назад

The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerability affects Firefox < 86.

CVE-2021-23974

CVSS3: 6.1

nvd

больше 4 лет назад

The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerability affects Firefox < 86.

GHSA-xgvx-m8xh-737m

CVSS3: 6.1

github

около 3 лет назад

The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerability affects Firefox < 86.