Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cq4j-49w3-ppw7

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9

Описание

In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect.

In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect.

EPSS

Процентиль: 76%
0.00944
Низкий

9 Critical

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 9
nvd
почти 7 лет назад

In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect.

EPSS

Процентиль: 76%
0.00944
Низкий

9 Critical

CVSS3

Дефекты

CWE-20