Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6wvv-23hx-p89r

Опубликовано: 22 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. This could have been used to escape HTML comments on pages that put user-controlled data in them. This vulnerability affects Firefox < 101.

Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. This could have been used to escape HTML comments on pages that put user-controlled data in them. This vulnerability affects Firefox < 101.

EPSS

Процентиль: 63%
0.00455
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 3 года назад

Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. This could have been used to escape HTML comments on pages that put user-controlled data in them. This vulnerability affects Firefox < 101.

CVSS3: 6.5
nvd
почти 3 года назад

Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. This could have been used to escape HTML comments on pages that put user-controlled data in them. This vulnerability affects Firefox < 101.

CVSS3: 6.5
debian
почти 3 года назад

Firefox's HTML parser did not correctly interpret HTML comment tags, r ...

CVSS3: 4.7
fstec
больше 3 лет назад

Уязвимость синтаксического анализатора HTML браузеров Firefox, позволяющая нарушителю проводить межсайтовые сценарные атаки

EPSS

Процентиль: 63%
0.00455
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-79