Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6h2f-xfhj-5wr4

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does not properly interact with XrayWrapper property filtering, which allows remote attackers to bypass intended DOM object restrictions by leveraging property availability after XrayWrapper removal.

The structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does not properly interact with XrayWrapper property filtering, which allows remote attackers to bypass intended DOM object restrictions by leveraging property availability after XrayWrapper removal.

EPSS

Процентиль: 43%
0.00209
Низкий

Дефекты

CWE-284

Связанные уязвимости

ubuntu
около 11 лет назад

The structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does not properly interact with XrayWrapper property filtering, which allows remote attackers to bypass intended DOM object restrictions by leveraging property availability after XrayWrapper removal.

redhat
около 11 лет назад

The structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does not properly interact with XrayWrapper property filtering, which allows remote attackers to bypass intended DOM object restrictions by leveraging property availability after XrayWrapper removal.

nvd
около 11 лет назад

The structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does not properly interact with XrayWrapper property filtering, which allows remote attackers to bypass intended DOM object restrictions by leveraging property availability after XrayWrapper removal.

debian
около 11 лет назад

The structured-clone implementation in Mozilla Firefox before 34.0 and ...

EPSS

Процентиль: 43%
0.00209
Низкий

Дефекты

CWE-284