Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hq9m-2fcc-v974

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from the browser itself or an extension the web content can provide its own result for that operator, possibly tricking the browser or extension into mishandling the element. This vulnerability affects Firefox < 56.

The "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from the browser itself or an extension the web content can provide its own result for that operator, possibly tricking the browser or extension into mishandling the element. This vulnerability affects Firefox < 56.

EPSS

Процентиль: 74%
0.00807
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 7 лет назад

The "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from the browser itself or an extension the web content can provide its own result for that operator, possibly tricking the browser or extension into mishandling the element. This vulnerability affects Firefox < 56.

CVSS3: 5.3
nvd
больше 7 лет назад

The "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from the browser itself or an extension the web content can provide its own result for that operator, possibly tricking the browser or extension into mishandling the element. This vulnerability affects Firefox < 56.

CVSS3: 5.3
debian
больше 7 лет назад

The "instanceof" operator can bypass the Xray wrapper mechanism. When ...

CVSS3: 5.3
fstec
больше 8 лет назад

Уязвимость оператора «instanceof» браузера Mozilla Firefox, позволяющая нарушителю оказать влияние на целостность данных

EPSS

Процентиль: 74%
0.00807
Низкий

5.3 Medium

CVSS3