Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hq9m-2fcc-v974

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from the browser itself or an extension the web content can provide its own result for that operator, possibly tricking the browser or extension into mishandling the element. This vulnerability affects Firefox < 56.

The "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from the browser itself or an extension the web content can provide its own result for that operator, possibly tricking the browser or extension into mishandling the element. This vulnerability affects Firefox < 56.

EPSS

Процентиль: 65%
0.01188
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 8 лет назад

The "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from the browser itself or an extension the web content can provide its own result for that operator, possibly tricking the browser or extension into mishandling the element. This vulnerability affects Firefox < 56.

CVSS3: 5.3
nvd
около 8 лет назад

The "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from the browser itself or an extension the web content can provide its own result for that operator, possibly tricking the browser or extension into mishandling the element. This vulnerability affects Firefox < 56.

CVSS3: 5.3
debian
около 8 лет назад

The "instanceof" operator can bypass the Xray wrapper mechanism. When ...

CVSS3: 5.3
fstec
около 9 лет назад

Уязвимость оператора «instanceof» браузера Mozilla Firefox, позволяющая нарушителю оказать влияние на целостность данных

EPSS

Процентиль: 65%
0.01188
Низкий

5.3 Medium

CVSS3