GHSA-756h-ggr3-6vcj

Опубликовано: 14 июл. 2022

Источник: github

Github: Не прошло ревью

CVSS3: 6.1

Описание

Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process.

Ссылки

EPSS

Процентиль: 51%

0.00642

Низкий

6.1 Medium

CVSS3

CVE ID

CVE-2022-32308

Дефекты

CWE-79

Связанные уязвимости

CVE-2022-32308

CVSS3: 6.1

ubuntu

больше 4 лет назад

Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process.

CVE-2022-32308

CVSS3: 6.1

nvd

больше 4 лет назад

Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process.

CVE-2022-32308

CVSS3: 6.1

debian

больше 4 лет назад

Cross Site Scripting (XSS) vulnerability in uBlock Origin extension be ...

ALT-PU-2023-1156

CVSS3: 6.1

altlinux

почти 4 года назад

ALT-PU-2023-1156: package `firefox-ublock_origin` update to version 1.46.0-alt1

EPSS

Процентиль: 51%

0.00642

Низкий

6.1 Medium

CVSS3

CVE ID

CVE-2022-32308

Дефекты

CWE-79