Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h5mr-xp97-c4p5

Опубликовано: 22 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 10

Описание

It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

EPSS

Процентиль: 22%
0.00069
Низкий

10 Critical

CVSS3

Дефекты

CWE-91

Связанные уязвимости

CVSS3: 10
ubuntu
больше 2 лет назад

It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

CVSS3: 9.6
redhat
больше 3 лет назад

It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

CVSS3: 10
nvd
больше 2 лет назад

It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

CVSS3: 10
debian
больше 2 лет назад

It was possible to construct specific XSLT markup that would be able t ...

CVSS3: 8.8
fstec
больше 3 лет назад

Уязвимость изолированной среды iframe почтового клиента Thunderbird, браузеров Firefox и Firefox ESR, позволяющая нарушителю обойти изолированную программную среду iframe и выполнить произвольный код JavaScript в контексте произвольного окна

EPSS

Процентиль: 22%
0.00069
Низкий

10 Critical

CVSS3

Дефекты

CWE-91