Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5qrv-2vjc-xwcq

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Argument injection vulnerability involving Mozilla, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handling process, a similar issue to CVE-2007-3670.

Argument injection vulnerability involving Mozilla, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handling process, a similar issue to CVE-2007-3670.

EPSS

Процентиль: 64%
0.00479
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 18 лет назад

Argument injection vulnerability involving Mozilla, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handling process, a similar issue to CVE-2007-3670.

CVSS3: 9.8
nvd
больше 18 лет назад

Argument injection vulnerability involving Mozilla, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handling process, a similar issue to CVE-2007-3670.

CVSS3: 9.8
debian
больше 18 лет назад

Argument injection vulnerability involving Mozilla, when certain URIs ...

EPSS

Процентиль: 64%
0.00479
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-79