Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cg6w-97rj-9hvv

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Lack of escaping allowed HTML injection when a webpage was viewed in Reader View. While a Content Security Policy prevents direct code execution, HTML injection is still possible. Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 88.

Lack of escaping allowed HTML injection when a webpage was viewed in Reader View. While a Content Security Policy prevents direct code execution, HTML injection is still possible. Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 88.

EPSS

Процентиль: 59%
0.00377
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
ubuntu
больше 4 лет назад

Lack of escaping allowed HTML injection when a webpage was viewed in Reader View. While a Content Security Policy prevents direct code execution, HTML injection is still possible. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 88.

CVSS3: 6.1
nvd
больше 4 лет назад

Lack of escaping allowed HTML injection when a webpage was viewed in Reader View. While a Content Security Policy prevents direct code execution, HTML injection is still possible. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 88.

CVSS3: 6.1
debian
больше 4 лет назад

Lack of escaping allowed HTML injection when a webpage was viewed in R ...

EPSS

Процентиль: 59%
0.00377
Низкий

Дефекты

CWE-79