Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6wvv-23hx-p89r

Опубликовано: 22 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. This could have been used to escape HTML comments on pages that put user-controlled data in them. This vulnerability affects Firefox < 101.

Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. This could have been used to escape HTML comments on pages that put user-controlled data in them. This vulnerability affects Firefox < 101.

EPSS

Процентиль: 36%
0.00428
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 3 лет назад

Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. This could have been used to escape HTML comments on pages that put user-controlled data in them. This vulnerability affects Firefox < 101.

CVSS3: 6.5
nvd
больше 3 лет назад

Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. This could have been used to escape HTML comments on pages that put user-controlled data in them. This vulnerability affects Firefox < 101.

CVSS3: 6.5
debian
больше 3 лет назад

Firefox's HTML parser did not correctly interpret HTML comment tags, r ...

CVSS3: 4.7
fstec
около 4 лет назад

Уязвимость синтаксического анализатора HTML браузеров Firefox, позволяющая нарушителю проводить межсайтовые сценарные атаки

EPSS

Процентиль: 36%
0.00428
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-79